PT-2023-4248
CVE-2023-37488
·
تاريخ النشر
2023-08-08
·
تاريخ التحديث
2023-08-15
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Process Integration versions SAP XIESR 7.50, SAP XITOOL 7.50, SAP XIAF 7.50
Description
The issue is related to insufficient encoding of user-controlled inputs, which could result in a Cross-Site Scripting (XSS) attack. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the system.
Recommendations
For SAP NetWeaver Process Integration versions SAP XIESR 7.50, SAP XITOOL 7.50, SAP XIAF 7.50, ensure that user-controlled inputs are sufficiently encoded to prevent Cross-Site Scripting (XSS) attacks. As a temporary workaround, consider implementing additional input validation and encoding mechanisms to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾