Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cross-Site Scripting (XSS) vulnerability in SAP Companion
Vulnerability Description
SAP Companion - version <3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
SAP Companion 跨站脚本漏洞
Vulnerability Description
SAP Companion是德国思爱普（SAP）公司的一个基于 Web 的帮助系统。提供上下文相关的应用内帮助。 SAP Companion 3.1.38之前版本存在跨站脚本漏洞，该漏洞源于允许攻击者向用户发送恶意链接，该链接可能允许攻击者检索敏感信息并对 Web 应用程序的完整性造成轻微影响。
CVSS Information
N/A
Vulnerability Type
N/A