PT-2020-1563
CVE-2020-6305
·
تاريخ النشر
2020-01-14
·
تاريخ التحديث
2020-01-21
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SAP Process Integration versions prior to the updates provided in SAP XIAF 7.31, 7.40, 7.50
Description
The issue is related to insufficient protection of the web page structure in the REST adapter of the SAP Process Integration platform. This can allow a remote attacker to perform cross-site scripting (XSS) attacks.
Recommendations
For versions prior to the updates provided in SAP XIAF 7.31, 7.40, 7.50, update to the respective version or later to resolve the issue.
As a temporary workaround, consider restricting user-controlled inputs to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾