medium6.1Public exploit code
CVE-2018-11415
SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP Internet Transaction Server 6200.x - Session Fixation / Cross-Site Scripting2018-05-25 · webapps · multiple
Impact
SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Internet Transaction Server | Version 6.20 |