CVE-2019-0337

Published: Aug 14, 2019Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting (XSS) vulnerability

Affected (6)

Products: Sap: Netweaver Process Integration

Sap

1 product

Netweaver Process Integration

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Process Integration	Version 7.10
Sap Netweaver Process Integration	Version 7.11
Sap Netweaver Process Integration	Version 7.30
Sap Netweaver Process Integration	Version 7.31
Sap Netweaver Process Integration	Version 7.40
Sap Netweaver Process Integration	Version 7.50