PT-2013-1478
CVE-2011-5263
·
تاريخ النشر
2013-02-12
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver versions 7.30 and earlier
Description
The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the
server parameter in the RetrieveMailExamples function.Recommendations
For SAP NetWeaver versions 7.30 and earlier, consider restricting access to the RetrieveMailExamples function until a patch is available. As a temporary workaround, avoid using the
server parameter in the affected function to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾