Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-37488
HistoryAug 08, 2023 - 1:15 a.m.

Cross site scripting

2023-08-0801:15:00
PRIOn knowledge base
www.prio-n.com
8
sap
netweaver
process integration
cross-site scripting
xss
user-controlled inputs
encoded
nvd
confidentiality
integrity

0.0005 Low

EPSS

Percentile

17.1%

In SAP NetWeaver Process Integration - versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, user-controlled inputs, if not sufficiently encoded, could result in Cross-Site Scripting (XSS) attack. On successful exploitation the attacker can cause limited impact on confidentiality and integrity of the system.

CPENameOperatorVersion
netweaver_process_integrationeq7.50

0.0005 Low

EPSS

Percentile

17.1%

Related for PRION:CVE-2023-37488