SAP NetWeaver and Web Dynpro Java Cross-Site Scripting Vulnerability

Bugtraq ID: 24676
Class: Input Validation Error
CVE:
Remote: Yes
Local: No
Published: Jun 27 2007 12:00AM
Updated: Jun 28 2007 10:38PM
Credit: Cyrill Brunschwiler is credited with the discovery of this vulnerability.
Vulnerable: SAP NetWeaver Nw04s SP9
SAP NetWeaver Nw04s SP8
SAP NetWeaver Nw04s SP7
SAP NetWeaver Nw04s SP11
SAP NetWeaver Nw04s SP10
SAP NetWeaver Nw04 SP19
SAP NetWeaver Nw04 SP18
SAP NetWeaver NW04 SP17
SAP NetWeaver Nw04 SP16
SAP NetWeaver Nw04 SP15
Not Vulnerable: SAP Web Dynpro Runtime Core Components 700 SP12
SAP Java Technology Service 640 SP20


 

Privacy Statement
Copyright 2010, SecurityFocus