Количество 3
Количество 3
CVE-2024-22126
The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.
GHSA-r3c3-f9mx-3phh
The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.
BDU:2024-05017
Уязвимость компонента User Admin Application программного средства создания и развертывания веб-приложений SAP NetWeaver AS for Java, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22126 The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability. | CVSS3: 6.1 | 0% Низкий | почти 2 года назад |
| GHSA-r3c3-f9mx-3phh The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability. | CVSS3: 8.8 | 0% Низкий | почти 2 года назад |
 | BDU:2024-05017 Уязвимость компонента User Admin Application программного средства создания и развертывания веб-приложений SAP NetWeaver AS for Java, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 8.8 | 0% Низкий | почти 2 года назад |
Уязвимостей на страницу