漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP Netweaver 跨站脚本漏洞
Vulnerability Description
SAP Netweaver是德国思爱普(SAP)公司的一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。 SAP Netweaver 存在安全漏洞,攻击者可利用该漏洞威胁易受攻击的系统,其中包括Business Objects、SAP CRM Web Channel、SAP CRM、SAP ERP、NetWeaver、ASE。
CVSS Information
N/A
Vulnerability Type
N/A