Sign-up

ID

VAR-201109-0398


TITLE

SAP WebAS webrfc Cross-Site Scripting Vulnerability

Trust: 0.8

sources: IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-3688

DESCRIPTION

SAP Web Application Server (sometimes called WebAS) is the runtime environment for SAP applications - all mySAP Business Suite solutions (SRM, CRM, SCM, PLM, ERP) run on SAP WebAS. The SAP Web Application Server WEBRFC ICF service has an input validation vulnerability that allows an attacker to exploit a vulnerability for cross-site scripting attacks

Trust: 0.72

sources: CNVD: CNVD-2011-3688 // IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-3688

AFFECTED PRODUCTS

vendor:sapmodel:web application serverscope:eqversion:7.0

Trust: 0.8

sources: IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-3688

CVSS

SEVERITY

CVSSV2

CVSSV3

IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d
value: LOW

Trust: 0.2

IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d
severity: NONE
baseScore: NONE
vectorString: NONE
accessVector: NONE
accessComplexity: NONE
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: UNKNOWN

Trust: 0.2

sources: IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d

TYPE

Cross-site scripting

Trust: 0.2

sources: IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d

EXTERNAL IDS

db:CNVDid:CNVD-2011-3688

Trust: 0.8

db:IVDid:4A96885C-1F88-11E6-ABEF-000C29C66E3D

Trust: 0.2

sources: IVD: 4a96885c-1f88-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-3688

REFERENCES

url:http://seclists.org/fulldisclosure/2011/sep/130

Trust: 0.6

sources: CNVD: CNVD-2011-3688

SOURCES

db:IVDid:4a96885c-1f88-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2011-3688

LAST UPDATE DATE

2022-05-17T02:00:11.110000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2011-3688date:2011-09-16T00:00:00

SOURCES RELEASE DATE

db:IVDid:4a96885c-1f88-11e6-abef-000c29c66e3ddate:2011-09-16T00:00:00
db:CNVDid:CNVD-2011-3688date:2011-09-16T00:00:00