PT-2009-5282 · Sap · Sap Netweaver Application Server Abap

Publicado 2009-08-21 · Atualizado 2018-10-10 · CVE-2009-2932

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server (Java) version 7.0

Description: The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the TModel Key field in the UDDI client.

Recommendations: For SAP NetWeaver Application Server (Java) version 7.0, update the UDDI client to prevent XSS attacks by restricting input in the TModel Key field.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-2932

Produtos afetados

Sap Netweaver Application Server Abap

Referências · 10

• 🔥 http://dsecrg.com/pages/vul/show.php?id=133 · Exploit
• http://securitytracker.com/id?1022731 · Nota
• http://secunia.com/advisories/36228 · Aviso do Fabricante
• http://securityfocus.com/archive/1/505697/100/0/threaded · Nota
• http://securityfocus.com/bid/36034 · Nota
• http://osvdb.org/57000 · Nota
• https://service.sap.com/sap/support/notes/1322098 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52429 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2932 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2932 · Nota