Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vwhx-5rv8-vg6x

Опубликовано: 13 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenticated attacker to inject a script into a web request header. On successful exploitation, an attacker can view or modify information causing a limited impact on the confidentiality and integrity of the application.

Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenticated attacker to inject a script into a web request header. On successful exploitation, an attacker can view or modify information causing a limited impact on the confidentiality and integrity of the application.

EPSS

Процентиль: 81%
0.01621
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-20
CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 3 лет назад

Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenticated attacker to inject a script into a web request header. On successful exploitation, an attacker can view or modify information causing a limited impact on the confidentiality and integrity of the application.

EPSS

Процентиль: 81%
0.01621
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-20
CWE-79