Sign-up

ID

VAR-201106-0307


TITLE

SAP NetWeaver 'Deployer servlet' Input Cross-Site Scripting Vulnerability

Trust: 0.8

sources: IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-2387

DESCRIPTION

SAP NetWeaver is the technical foundation for SAP Business Suite solutions, SAP xApps composite applications, partner solutions, and custom applications. Inputs passed to the Deployer servlet in the Trust Center service via the \"BSNAME\" and \"REQID\" parameters are not filtered before returning to the user, which can lead to cross-site scripting attacks

Trust: 0.72

sources: CNVD: CNVD-2011-2387 // IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-2387

AFFECTED PRODUCTS

vendor:sapmodel:netweaverscope:eqversion:7.x

Trust: 0.8

sources: IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-2387

CVSS

SEVERITY

CVSSV2

CVSSV3

IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d
severity: NONE
baseScore: NONE
vectorString: NONE
accessVector: NONE
accessComplexity: NONE
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: UNKNOWN

Trust: 0.2

sources: IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d

TYPE

Cross-site scripting

Trust: 0.2

sources: IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d

PATCH

title:SAP NetWeaver 'Deployer servlet' enters patches for cross-site scripting vulnerabilitiesurl:https://www.cnvd.org.cn/patchinfo/show/4228

Trust: 0.6

sources: CNVD: CNVD-2011-2387

EXTERNAL IDS

db:CNVDid:CNVD-2011-2387

Trust: 0.8

db:IVDid:C05B8E4E-1F91-11E6-ABEF-000C29C66E3D

Trust: 0.2

sources: IVD: c05b8e4e-1f91-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-2387

REFERENCES

url:http://dsecrg.com/pages/vul/show.php?id=325

Trust: 0.6

sources: CNVD: CNVD-2011-2387

SOURCES

db:IVDid:c05b8e4e-1f91-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2011-2387

LAST UPDATE DATE

2022-05-17T02:03:34.573000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2011-2387date:2011-06-22T00:00:00

SOURCES RELEASE DATE

db:IVDid:c05b8e4e-1f91-11e6-abef-000c29c66e3ddate:2011-06-22T00:00:00
db:CNVDid:CNVD-2011-2387date:2011-06-22T00:00:00