Cross site scripting

2018-10-0913:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.0%

JSON

In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
netweavereq7.30
netweavereq7.31
netweavereq7.40
netweaverge7.0
netweaverle7.02
netweaverge7.50
netweaverle7.53

Name	Operator	Version
netweaver	eq	7.30
netweaver	eq	7.31
netweaver	eq	7.40
netweaver	ge	7.0
netweaver	le	7.02
netweaver	ge	7.50
netweaver	le	7.53

References

www.securityfocus.com/bid/105551

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095

0.001 Low

EPSS

Percentile

45.0%

JSON

Related for PRION:CVE-2018-2470