Published: 14/05/2019 Updated: 16/05/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Fixed in the following components SAP-CRMJAV SAP-CRMWEB SAP-SHRWEB SAP-SHRJAV SAP-CRMAPP SAP-SHRAPP, versions 7.30, 7.31, 7.32, 7.33, 7.54.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sap e-commerce 7.30
sap e-commerce 7.31
sap e-commerce 7.32
sap e-commerce 7.33
sap e-commerce 7.54

CWE-79 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032 https://launchpad.support.sap.com/#/notes/2773086 http://www.securityfocus.com/bid/108314 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-0298

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect