Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6cmx-5pqj-8h85

Опубликовано: 14 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.

SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.

EPSS

Процентиль: 37%
0.00157
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 6.8
nvd
почти 3 года назад

SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.

EPSS

Процентиль: 37%
0.00157
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-611