CVE-2017-10701

medium

Description

Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2469860, 2471209, and 2488516.

References

Advisories

https://cxsecurity.com/issue/WLB-2017090219

http://www.securityfocus.com/bid/101068

http://www.securityfocus.com/bid/100805

http://www.securityfocus.com/bid/100788

http://www.securityfocus.com/bid/100786

Details

Source: Mitre, NVD

Published: 2017-09-29

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N