CVE-2007-3495

Published: Jun 29, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error page.

Affected (2)

Products: Sap: Sap Basis Component 640, Sap Basis Component 700

2 products

Sap Basis Component 640

Sap Basis Component 700

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Sap Sap Basis Component 640	Up to sp19
Sap Sap Basis Component 700	Up to sp11

References (14)

http://osvdb.org/37749

Source: cve@mitre.org

http://secunia.com/advisories/25866

Source: cve@mitre.org

http://securityreason.com/securityalert/2849

Source: cve@mitre.org

http://www.csnc.ch/advisory/sap02.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/472345/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2381

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35107

Source: cve@mitre.org

http://osvdb.org/37749

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25866

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/2849

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.csnc.ch/advisory/sap02.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/472345/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2381

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35107

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.