Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default configuration of SAP NetWeaver before 7.0 SP15 does not enable the "Always Use Secure HTML Editor" (aka Editor Security or Secure Editing) parameter, which allows remote attackers to conduct cross-site scripting (XSS) attacks by entering feedback for a file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP NetWeaver Filesystem Feedbacks跨站脚本攻击漏洞
Vulnerability Description
7.0 SP15以前的SAP NetWeaver的默认设置并不激活"Always Use Secure HTML Editor" (aka Editor Security 或Secure Editing) 参数，远程攻击者通过向一个文件输入回执来引发跨站脚本攻击漏洞。
CVSS Information
N/A
Vulnerability Type
N/A