Cross site scripting

2019-09-1017:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.3%

JSON

SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
supplier_relationship_managementeq7.31
supplier_relationship_managementeq7.32
supplier_relationship_managementeq3.73

Name	Operator	Version
supplier_relationship_management	eq	7.31
supplier_relationship_management	eq	7.32
supplier_relationship_management	eq	3.73

References

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506

0.001 Low

EPSS

Percentile

36.3%

JSON

Related for PRION:CVE-2019-0361