medium4.3
CVE-2013-7365
Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Impact
Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Enterprise Portal | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0132.html
- http://scn.sap.com/docs/DOC-8218
- http://www.onapsis.com/get.php?resid=adv_onapsis-2013-003
- http://www.onapsis.com/research-advisories.php
- http://www.securityfocus.com/bid/58155
- https://service.sap.com/sap/support/notes/1589716
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0132.html
- http://scn.sap.com/docs/DOC-8218
- http://www.onapsis.com/get.php?resid=adv_onapsis-2013-003
- http://www.onapsis.com/research-advisories.php
- http://www.securityfocus.com/bid/58155
- https://service.sap.com/sap/support/notes/1589716