Description (CNA)
Document Service handler (obsolete) in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability with low impact on Confidentiality and Integrity of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP S/4HANA (Document Service Handler for DPS) | affected SAP_BASIS 740; affected SAP_BASIS 750; affected SAP_BASIS 751; affected SAP_BASIS 752; affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected SAP_BASIS 758 |
CWE
CWE-79
References
- https://me.sap.com/notes/3460772
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.