Description (CNA)
SAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752, 75A, 75F, does not sufficiently encode input and output parameters which results in reflected cross site scripting vulnerability, through which a malicious user can access data relating to the current session and use it to impersonate a user and access all information with the same rights as the target user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver AS for ABAP (Web Survey) | affected < 700; affected < 702; affected < 710; affected < 711; affected < 730; affected < 731; affected < 750; affected < 752; affected < 75A; affected < 75F |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/3004043
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
ADP enrichment
No English description supplied.