← Back

Netweaver Java Web Application

netweaver_java_web_application

Vendor: Sap • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-2371
1Sap
1Netweaver Java Web Application
Nov 21, 2024
Feb 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.