Cross site scripting

2018-04-1015:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting.

CPENameOperatorVersion
solution_managereq7.20
solution_managereq7.10

CPE	Name	Operator	Version
	solution_manager	eq	7.20
	solution_manager	eq	7.10

References

www.securityfocus.com/bid/103703

blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/

launchpad.support.sap.com/