Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-892c-ggr4-vgr5

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Security Note 2368106.

Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Security Note 2368106.

EPSS

Процентиль: 73%
0.00756
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.7
nvd
почти 9 лет назад

Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Security Note 2368106.

EPSS

Процентиль: 73%
0.00756
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79