CVE-2021-33703 in Netweaver Enterprise Portalinformação

Sumário

de MITRE • 10/08/2021

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

SAP SE

Reservar

28/05/2021

Divulgação

10/08/2021

Moderação

aceite

Entrada

VDB-180511

CPE

pronto

EPSS

0.01482

KEV

não

Atividades

muito baixo

Fontes

Might our Artificial Intelligence support you?

Check our Alexa App!