Lucene search

K
cveMitreCVE-2003-0749
HistoryOct 20, 2003 - 4:00 a.m.

CVE-2003-0749

2003-10-2004:00:00
mitre
web.nvd.nist.gov
40
cve-2003-0749
cross-site scripting
xss
sap
internet transaction server
wgate.dll
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

High

EPSS

0.945

Percentile

99.2%

Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.

Affected configurations

Nvd
Node
sapinternet_transaction_serverMatch4620.2.0.323011
VendorProductVersionCPE
sapinternet_transaction_server4620.2.0.323011cpe:2.3:a:sap:internet_transaction_server:4620.2.0.323011:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

High

EPSS

0.945

Percentile

99.2%