Lucene search
+L

7 matches found

NVD
NVD
•added 2023/12/12 2:15 a.m.•30 views

CVE-2023-49577

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

6.1CVSS0.0041EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/12/12 2:15 a.m.•19 views

CVE-2023-49577

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

6.1CVSS5.8AI score0.0041EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/12 2:15 a.m.•43 views

Cross site scripting

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

5.8CVSS6.2AI score0.0041EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/12/12 1:04 a.m.•50 views

CVE-2023-49577 Cross-Site Scripting (XSS) vulnerability in the SAP HCM (SMART PAYE solution)

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

6.1CVSS6.2AI score0.0041EPSS
SaveExploits0References2
CVE
CVE
•added 2023/12/12 1:04 a.m.•77 views

CVE-2023-49577

CVE-2023-49577 affects SAP HCM (SMART PAYE solution) versions S4HCMCIE 100, SAP_HRCIE 600, 604, 608. Root cause is insufficient encoding of user-controlled inputs, enabling cross-site scripting (XSS). Impact is limited to confidentiality and integrity of the application; no availability impact. E...

6.1CVSS6AI score0.0041EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•7 views

CVE-2023-49577: Improper Neutralization of Input During Web Page Generation

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

6.1CVSS6.3AI score0.0041EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/11 12:00 a.m.•3 views

PT-2023-31262

Name of the Vulnerable Software and Affected Versions SAP HCM SMART PAYE solution versions S4HCMCIE 100, SAP HRCIE 600, SAP HRCIE 604, SAP HRCIE 608 Description The SAP HCM SMART PAYE solution does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. Afte...

6.1CVSS5.8AI score0.0041EPSS
SaveExploits0References8
Rows per page
Query Builder