Description (CNA)
SAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / SAP Marketing (UICUAN) | affected = 1.20; affected = 1.30; affected = 1.40 |
| SAP / SAP Marketing (SAPSCORE) | affected = 1.13; affected = 1.14 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699
- http://www.securityfocus.com/bid/106171
- https://launchpad.support.sap.com/#/notes/2705204
ADP enrichment
No English description supplied.