Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1248870-2)
SAP Support Packages
(PORTAL_FRAMEWORK_700_999999_999999, PORTAL_FRAMEWORK_700_SP018_000000, PORTAL_FRAMEWORK_700_SP999999_999999, PORTAL_FRAMEWORK_701_999999_999999, PORTAL_FRAMEWORK_701_SP002_000000, PORTAL_FRAMEWORK_701_SP999999_999999, PORTAL_FRAMEWORK_702_999999_999999, PORTAL_FRAMEWORK_702_SP000_000000, PORTAL_FRAMEWORK_702_SP999999_999999, PORTAL_PLATFORM_60_640_999999_999999, PORTAL_PLATFORM_60_640_SP023_000000, PORTAL_PLATFORM_60_640_SP999999_999999)
Описание
'Cross Site Scripting' is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web users into the web pages viewed by other users.
In order to prevent vulnerability through 'Cross Site Scripting', we are using filtering functions when we are dealing with parameters coming from the user (browser Client).
This particular fix handles a very small possibility for impact.
In order to prevent vulnerability through 'Cross Site Scripting', we are using filtering functions when we are dealing with parameters coming from the user (browser Client).
This particular fix handles a very small possibility for impact.
Как исправить
The fix was submitted to: NW04 SP23, NW04s SP18, NW04s EhP1 SP2, NW04s EhP2 SP0.
Ссылки
