Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1363788-4)
SAP Support Packages
(PORTAL_700_999999_999999, PORTAL_700_SP021_000000, PORTAL_700_SP022_000000, PORTAL_700_SP999999_999999, PORTAL_701_999999_999999, PORTAL_701_SP006_000000, PORTAL_701_SP007_000000, PORTAL_701_SP999999_999999, PORTAL_702_999999_999999, PORTAL_702_SP002_000000, PORTAL_702_SP004_000000, PORTAL_702_SP999999_999999, PORTAL_PLATFORM_60_640_999999_999999, PORTAL_PLATFORM_60_640_SP025_000000, PORTAL_PLATFORM_60_640_SP999999_999999)
Описание
Parameters in the IFrame built by the page builder were not encoded.
Как исправить
All parameters which are passed from page builder are encoded so that on client no malicious scripts can run.
The fix is available in the following versions:
- NW04 SP25
- NW04s SP21
- NW04s EhP 1 (7.01) SP6
- NW04s EhP 2 (7.02) SP2
The fix is available in the following versions:
- NW04 SP25
- NW04s SP21
- NW04s EhP 1 (7.01) SP6
- NW04s EhP 2 (7.02) SP2
Ссылки
