PT-2019-4341 · Sap · Sap Supplier Relationship Management

Published 2019-09-10 · Updated 2019-09-11 · CVE-2019-0361

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management versions prior to 3.73, 7.31, 7.32

Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting (XSS) issue. This can be exploited by a remote attacker to perform cross-site scripting attacks.

Recommendations For versions prior to 3.73, update to version 3.73 or later. For versions prior to 7.31, update to version 7.31 or later. For versions prior to 7.32, update to version 7.32 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2020-00059

CVE-2019-0361

Affected Products

Sap Supplier Relationship Management

References · 5

• https://launchpad.support.sap.com/#/notes/2820607 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00059 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-0361 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0361 · Security Note