PT-2016-5807
CVE-2016-4016
·
Publicado
2016-04-14
·
Atualizado
2018-12-10
Descrição por
CVSS 3.1
6.1
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP Manufacturing Integration and Intelligence versions 15
Description
The issue is related to a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the xmiiuiadminnavigation/NavigationApplication" API endpoint.
title parameter to the "webdynpro/resources/sap.com/xappsRecommendations
For version 15, update to a version that includes the fix for SAP Security Note 2201295 to resolve the issue.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾