CVE-2018-2424 in Hana DBinformazioni

Riassunto

di MITRE

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP UI for SAP NetWeaver 7.00

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsabile

SAP SE

Prenotare

15/12/2017

Divulgazione

12/06/2018

Moderazione

accettato

CPE

pronto

EPSS

0.02396

KEV

no

Attività

molto basso

Fonti

Do you know our Splunk app?

Download it now for free!