exploitDog

CVE-2022-26101

Опубликовано: 10 мар. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Ссылки

http://packetstormsecurity.com/files/167561/SAP-Fiori-Launchpad-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2022/Jun/39
Exploit
Mailing List
Third Party Advisory
https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3149805
Permissions Required
Vendor Advisory
http://packetstormsecurity.com/files/167561/SAP-Fiori-Launchpad-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2022/Jun/39
Exploit
Mailing List
Third Party Advisory
https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3149805
Permissions Required
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:fiori_launchpad:754:*:*:*:*:*:*:*

cpe:2.3:a:sap:fiori_launchpad:755:*:*:*:*:*:*:*

cpe:2.3:a:sap:fiori_launchpad:756:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00655

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-m47p-phwj-fgwr

CVSS3: 6.1

github

почти 4 года назад

Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

EPSS

Процентиль: 71%

0.00655

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79