Description (CNA)
SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME) | affected < 700; affected < 701; affected < 702; affected < 710; affected < 711; affected < 730; affected < 731; affected < 740; affected < 750; affected < 751; affected < 752; affected < 75A; affected < 75B; affected < 75C; affected < 75D; affected < 75E |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
- https://launchpad.support.sap.com/#/notes/2900374
ADP enrichment
No English description supplied.