Cross site scripting

2018-03-0117:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.7%

JSON

SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
netweaver_portaleq7.30
netweaver_portaleq7.31
netweaver_portaleq7.40
netweaver_portaleq7.50

Name	Operator	Version
netweaver_portal	eq	7.30
netweaver_portal	eq	7.31
netweaver_portal	eq	7.40
netweaver_portal	eq	7.50

References

www.securityfocus.com/bid/102999

blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/

launchpad.support.sap.com/

0.001 Low

EPSS

Percentile

45.7%

JSON

Related for PRION:CVE-2018-2365