⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-4161

MEDIUM · 4.3 CVSS Gepubliceerd: 13-06-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Vendors

Sap

Affected products

Supplier Relationship Management

References

blog.emaze.net
scn.sap.com
secunia.com
service.sap.com