CVE-2019-0298

SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability

published May 14, 2019

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Fixed in the following components SAP-CRMJAV SAP-CRMWEB SAP-SHRWEB SAP-SHRJAV SAP-CRMAPP SAP-SHRAPP, versions 7.30, 7.31, 7.32, 7.33, 7.54.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01325 · 70.7th percentile
Published
2019-05-14T20:22Z
EPSS history
Timeline
  • 14 MAY 20:22Z
    SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability
    cvelistv5