PT-2023-31262
CVE-2023-49577
·
تاريخ النشر
2023-12-11
·
تاريخ التحديث
2023-12-19
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP HCM (SMART PAYE solution) versions S4HCMCIE 100, SAP HRCIE 600, SAP HRCIE 604, SAP HRCIE 608
Description
The SAP HCM (SMART PAYE solution) does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) issue. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.
Recommendations
For versions S4HCMCIE 100, SAP HRCIE 600, SAP HRCIE 604, SAP HRCIE 608, consider implementing proper input encoding to prevent Cross-Site Scripting (XSS) attacks.
As a temporary workaround, consider restricting user input to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾