PT-2020-19099
CVE-2020-6326
·
تاريخ النشر
2020-09-09
·
تاريخ التحديث
2020-09-14
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver (Knowledge Management) versions 7.30 through 7.50
Description
The issue allows an authenticated attacker to create malicious links in the UI. When clicked by a victim, these links will execute arbitrary Java scripts, thus extracting or modifying information otherwise restricted, leading to Stored Cross Site Scripting.
Recommendations
For versions 7.30 through 7.50, update to a version that includes the fix for this issue to prevent Stored Cross Site Scripting attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾