Lucene search
K

4 matches found

OSV
OSV
added 2021/04/13 7:15 p.m.1 views

CVE-2021-27600

SAP Manufacturing Execution System Rules, versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and send it to the server because SAP Manufacturing Execution System Rules tab does not sufficiently encode some parameters, resulting in Stored...

5.4CVSS6.5AI score0.00222EPSS
Exploits0References2
Prion
Prion
added 2021/04/13 7:15 p.m.9 views

Cross site scripting

SAP Manufacturing Execution System Rules, versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and send it to the server because SAP Manufacturing Execution System Rules tab does not sufficiently encode some parameters, resulting in Stored...

3.5CVSS5.4AI score0.00222EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/13 6:43 p.m.28 views

CVE-2021-27600

SAP Manufacturing Execution System Rules, versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and send it to the server because SAP Manufacturing Execution System Rules tab does not sufficiently encode some parameters, resulting in Stored...

6.4CVSS5.7AI score0.00222EPSS
Exploits0References2
CVE
CVE
added 2021/04/13 6:43 p.m.34 views

CVE-2021-27600

SAP Manufacturing Execution (System Rules) versions 15.1–15.4 are affected by a Stored XSS vulnerability caused by insufficient encoding of certain HTTP parameters in the System Rules tab. An authorized attacker could embed malicious code into HTTP parameters and have it processed by the server, ...

6.4CVSS5.4AI score0.00222EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder