Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site (XSS) scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to stealing or modifying of authentication information of the user, such as data relating to his or her current session.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
SAP NetWeaver Portal 跨站脚本漏洞
Vulnerability Description
SAP NetWeaver Portal是德国思爱普（SAP）公司的是SAP NetWeaver体系结构中的组成部分。 SAP NetWeaver Portal 7.30版本、7.31版本、7.40版本和7.50版本存在跨站脚本漏洞，该漏洞源于没有充分验证用户控制的输入，允许远程攻击者进行跨站（XSS）脚本攻击。如果攻击者成功利用该漏洞可以执行任意脚本代码，从而导致窃取或修改用户的认证信息，比如与用户当前会话有关的数据。
CVSS Information
N/A
Vulnerability Type
N/A