CVE-2019-0361
SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cna@sap.com
- Published
- 2019-09-10
- Last modified
- 2024-08-04
- Weaknesses
- CWE-79
Affected products
- Supplier Relationship Management (Sap)
- Sap Supplier Relationship Management Master Data Management Catalog Srm Mdm Cat (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2820607
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506
