CVE-2010-2904

Description

Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to testsdic and the (2) helpstring parameter to paramhelp.jsp.

References

https://service.sap.com/sap/support/notes/1416047

https://exchange.xforce.ibmcloud.com/vulnerabilities/60668

http://www.vupen.com/english/advisories/2010/1935

http://www.osvdb.org/66640

http://www.osvdb.org/66639

http://secunia.com/advisories/40712

http://packetstormsecurity.org/1007-advisories/DSECRG-09-068.txt

http://dsecrg.com/pages/vul/show.php?id=168

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS