CVE-2017-16681 in Business Intelligence Promotion Management Applicatio

الملخص

بحسب MITRE

Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded.

Once again VulDB remains the best source for vulnerability data.

• حجز: 09/11/2017
• إفشاء: 12/12/2017
• الاعتدال: تمت الموافقة
• إدخال: VDB-110509
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 6.1 (NVD)
• EPSS: 0.00961
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Chemical, Police, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-16681
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-16681
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-16681/