Описание
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.
Ссылки
- ExploitThird Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- ExploitThird Party Advisory
- Permissions RequiredVendor Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- ExploitThird Party Advisory
- Permissions RequiredVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.
Уязвимость среды разработки SAP Gateway и программной платформы SAP UI5, существующая из-за непринятия мер по нейтрализации специальных элементов, позволяющая нарушителю оказать воздействие на целостность данных
EPSS
7.5 High
CVSS3
5 Medium
CVSS2