CVE-2017-10701

Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2469860, 2471209, and 2488516.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-09-29

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Enterprise Portal (Sap)

References

• http://www.securityfocus.com/bid/100786
• http://www.securityfocus.com/bid/100788
• http://www.securityfocus.com/bid/100805
• http://www.securityfocus.com/bid/101068
• https://cxsecurity.com/issue/WLB-2017090219