CVE-2017-16685

Published: Dec 12, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-Site scripting (XSS) in SAP Business Warehouse Universal Data Integration, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to insufficient encoding of user controlled inputs.

Affected (7)

Products: Sap: Business Warehouse Universal Data Integration

Sap

1 product

Business Warehouse Universal Data Integration

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Sap Business Warehouse Universal Data Integration	Version 7.10
Sap Business Warehouse Universal Data Integration	Version 7.11
Sap Business Warehouse Universal Data Integration	Version 7.20
Sap Business Warehouse Universal Data Integration	Version 7.30
Sap Business Warehouse Universal Data Integration	Version 7.31
Sap Business Warehouse Universal Data Integration	Version 7.40
Sap Business Warehouse Universal Data Integration	Version 7.50