CVEvulnerability
CVE-2017-10701
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2469860, 2471209, and 2488516.
Affected configurations
• sap enterprise portal (<= 7.50)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/100786 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/100788 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/100805 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/101068 Third Party Advisory, VDB Entry
- https://cxsecurity.com/issue/WLB-2017090219 Third Party Advisory
- http://www.securityfocus.com/bid/100786 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/100788 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/100805 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/101068 Third Party Advisory, VDB Entry
- https://cxsecurity.com/issue/WLB-2017090219 Third Party Advisory