Cross site scripting

2020-05-1218:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

SAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response pages in case of errors, allowing XSS payload reflecting in the response, leading to reflected Cross Site Scripting.

CPENameOperatorVersion
enterprise_threat_detectioneq2.0
enterprise_threat_detectioneq1.0

CPE	Name	Operator	Version
	enterprise_threat_detection	eq	2.0
	enterprise_threat_detection	eq	1.0

References

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222