SAP NetWeaver AS JAVA 7.5 Cross Site Scripting

Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 - 7.5 Vendor URL: http://SAP.com Bug: XSS Sent: 20.10.2015 Reported: 21.10.2015 Vendor response: 21.10.2015 Date of Public Advisory: 08.03.2016 Reference: SAP Security Note 2238375 Author: Vahagn Vardanyan ERPScan...

CVE-2016-3975

SAP NetWeaver AS Java 7.1–7.5 is affected by a cross-site scripting (XSS) vulnerability (CVE-2016-3975) that can be exploited remotely via the NavigationURLTester endpoint to inject arbitrary script/HTML. Affected component is the SAP NetWeaver AS Java application server; root cause relates to th...