NetSight
IP …
medium5.4

CVE-2019-0275

SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficient…

Impact

SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficiently encode user-controlled inputs, which results in cross-site scripting (XSS) vulnerability.

Affected products

VendorProductAffected versions
SapNetweaver Application Server Java
from 7.10 through 7.11
Versions 7.20, 7.30, 7.31, 7.40, 7.50

Weakness classification

CWE-79

References