Description (CNA)
SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Supplier Relationship Management (Master Data Management Catalog) (SRM_MDM_CAT) | affected < 3.73; affected < 7.31; affected < 7.32 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506
- https://launchpad.support.sap.com/#/notes/2820607
ADP enrichment
No English description supplied.