PT-2010-3279 · Sap · Sap Netweaver

Publicado 2010-04-29 · Atualizado 2018-10-10 · CVE-2010-1609

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 2004 before SP21 SAP NetWeaver 2004s versions before SP13

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For SAP NetWeaver 2004 before SP21, update to SP21 or later. For SAP NetWeaver 2004s before SP13, update to SP13 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-1609

Produtos afetados

Sap Netweaver

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1609 · Nota
• http://securityfocus.com/archive/1/509499/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1609 · Nota de Segurança
• http://archives.neohapsis.com/archives/fulldisclosure/2010-02/0216.html · Nota
• http://secunia.com/advisories/38629 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/0397 · Aviso do Fabricante