SAP Internet Sales - XSS

Application: SAP NetWeaver Vendor URL: Bugs: XSS Risk: High Exploits: YES Reported: 08.04.2011 Vendor response: 08.04.2011 Date of Public Advisory: 17.02.2012 Reference: SAP Security Note 1583300 Description SAP NetWeaver 7.0 Internet Sales crm.b2b has XSS vulnerability. Business Risk An attacker...

SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability

Application: SAP Crystal Report Server 2008 Versions Affected: SAP Crystal Report Server 2008 Vendor URL: http://www.sap.com Bugs:Linked XSS Vulnerability Exploits: YES Reported: 09.12.2010 Vendor response:10.12.2010 Date of Public Advisory:15.09.2011 CVSS: 4.3 Author: Dmitriy Chastuchin...