Description (CNA)
SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Commerce Cloud | affected < 1808; affected < 1811; affected < 1905; affected < 2005; affected < 2011 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476
- https://launchpad.support.sap.com/#/notes/2984034
ADP enrichment
No English description supplied.