Cross site scripting

2020-12-0917:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.3%

JSON

SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input malicious java script in the URL which could be executed in the browser resulting in Reflected Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
netweaver_application_server_abapeq750
netweaver_application_server_abapeq752
netweaver_application_server_abapeq753
netweaver_application_server_abapeq754
netweaver_application_server_abapeq740
netweaver_application_server_abapeq751

Name	Operator	Version
netweaver_application_server_abap	eq	750
netweaver_application_server_abap	eq	752
netweaver_application_server_abap	eq	753
netweaver_application_server_abap	eq	754
netweaver_application_server_abap	eq	740
netweaver_application_server_abap	eq	751

References

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079

0.001 Low

EPSS

Percentile

36.3%

JSON

Related for PRION:CVE-2020-26835