Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5f56-53rv-c32c

Опубликовано: 14 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.

EPSS

Процентиль: 60%
0.004
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.3
nvd
почти 3 года назад

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.

EPSS

Процентиль: 60%
0.004
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79