Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vr8v-ggvj-qc6m

Опубликовано: 11 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.

Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.

EPSS

Процентиль: 81%
0.01469
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
почти 4 года назад

Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.

EPSS

Процентиль: 81%
0.01469
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79