Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8j5m-w5gm-27m4

Опубликовано: 10 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to a Reflected Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to a Reflected Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

EPSS

Процентиль: 38%
0.00166
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 1 года назад

Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to a Reflected Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

CVSS3: 6.1
fstec
больше 1 года назад

Уязвимость компонента eProcurement программного средства управления финансами SAP S/4HANA Finance, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 38%
0.00166
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79