PT-2018-10558

Name of the Vulnerable Software and Affected Versions SAP Internet Transaction Server ITS version 6200.X.X Description The issue concerns a Reflected Cross Site Scripting XSS vulnerability via certain wgate URIs. It has been reported that the vendor will not release any further updates for this...

CVE-2018-11415: Improper Neutralization of Input During Web Page Generation

SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...

CVE-2008-2123: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WGate in SAP Internet Transaction Server ITS 6.20 allows remote attackers to inject arbitrary web script or HTML via 1 a "" sequence in the service parameter to wgate.dll, or 2 Javascript splicing in the query string, a different vector than CVE-2006-5114...

CVE-2006-5114: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in wgate in SAP Internet Transaction Server ITS 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 urlmime or 2 command parameter, different vectors than CVE-2003-0749...

CVE-2003-0747: Undefined Security Weakness

wgate.dll in SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters 1 service, 2 templatelanguage, 3 language, 4 theme, or 5 template, which leaks the...

CVE-2003-0748: Undefined Security Weakness

Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the theme parameter and a template parameter with a filename followed by space characters, which can preven...

CVE-2003-0749: Undefined Security Weakness

Cross-site scripting XSS vulnerability in wgate.dll for SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the service parameter...