NVD

Id
11059  
Name
CVE-2011-4707  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-12-08  
Modified Date
2011-12-09  
Seq
2011-4707  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61605 11059 CVE-2011-4707 http://dsecrg.com/pages/vul/show.php?id=336  View
61606 11059 CVE-2011-4707 http://erpscan.com/advisories/dsecrg-11-036-sap-netwaver-virus-scan-interface-multiple-xss/  View
61607 11059 CVE-2011-4707 http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a  View
61608 11059 CVE-2011-4707 20111117 [DSECRG-11-036] SAP NetWaver Virus Scan Interface - multiple XSS  View
61609 11059 CVE-2011-4707 https://service.sap.com/sap/support/notes/1546307  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33085 JVNDB-2011-003325 SAP Netweaver の Virus Scan Interface におけるクロスサイトスクリプティングの脆弱性 SAP Netweaver の Virus Scan Interface には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4707 52614 CVE-2011-4707 11059 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003325.html 2011-12-08 2011-12-13 View