NVD

Id
14335  
Name
CVE-2010-2904  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to testsdic and the (2) helpstring parameter to paramhelp.jsp.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-07-28  
Modified Date
2010-07-29  
Seq
2010-2904  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79279 14335 CVE-2010-2904 http://dsecrg.com/pages/vul/show.php?id=168  View
79280 14335 CVE-2010-2904 http://packetstormsecurity.org/1007-advisories/DSECRG-09-068.txt  View
79281 14335 CVE-2010-2904 ADV-2010-1935  View
79282 14335 CVE-2010-2904 sapnetweaver-paramhelp-xss(60668)  View
79283 14335 CVE-2010-2904 https://service.sap.com/sap/support/notes/1416047  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39817 JVNDB-2010-005602 SAP NetWeaver の SLD コンポーネントにおけるクロスサイトスクリプティングの脆弱性 SAP NetWeaver の System Landscape Directory (SLD) コンポーネントには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2904 45484 CVE-2010-2904 14335 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005602.html 2010-07-28 2012-12-20 View