CVE-2018-11415

SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-05-24

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Internet Transaction Server (Sap)

References

• http://www.securityfocus.com/bid/104311
• https://github.com/0xd0m7/SAP
• https://www.exploit-db.com/exploits/44755/