Cross site scripting

2018-09-1115:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

44.9%

JSON

SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
netweavereq7.30
netweavereq7.31
netweavereq7.40
netweavereq7.20
netweavereq7.50

Name	Operator	Version
netweaver	eq	7.30
netweaver	eq	7.31
netweaver	eq	7.40
netweaver	eq	7.20
netweaver	eq	7.50

References

www.securityfocus.com/bid/105308

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993

0.001 Low

EPSS

Percentile

44.9%

JSON

Related for PRION:CVE-2018-2464