Lucene search

[email protected]CVE-2011-5260

HistoryFeb 12, 2013 - 8:55 p.m.

CVE-2011-5260

2013-02-1220:55:03

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-5260

cross-site scripting

xss

sap

netweaver

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected configurations

NVD

Node

sapnetweaverMatch-

sapnetweaverMatch4.0

sapnetweaverMatch6.4

sapnetweaverMatch7.0

sapnetweaverMatch7.0ehp1

sapnetweaverMatch7.0ehp2

sapnetweaverMatch7.0sp15

sapnetweaverMatch7.0sp8

CPENameOperatorVersion
sap:netweaversap netweavereq-
sap:netweaversap netweavereq4.0
sap:netweaversap netweavereq6.4
sap:netweaversap netweavereq7.0

CPE	Name	Operator	Version
sap:netweaver	sap netweaver	eq	-
sap:netweaver	sap netweaver	eq	4.0
sap:netweaver	sap netweaver	eq	6.4
sap:netweaver	sap netweaver	eq	7.0

References

dsecrg.com/pages/vul/show.php?id=337

www.sdn.sap.com/irj/scn/index?rid=/webcontent/uuid/50316177-762d-2f10-0993-a2206cc349b4

www.securityfocus.com/archive/1/520555/100/0/threaded

erpscan.io/advisories/dsecrg-11-037-sap-bw-doc-multiple-xss/

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

Related for CVE-2011-5260

prion1 cvelist1 nvd1