NVD

Id
43258  
Name
CVE-2012-1290  
Description
Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm.b2b) module in SAP NetWeaver 7.0 allows remote attackers to inject arbitrary web script or HTML via the _loadPage parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-02-23  
Modified Date
2012-02-24  
Seq
2012-1290  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217736 43258 CVE-2012-1290 http://dsecrg.com/pages/vul/show.php?id=414  View
217737 43258 CVE-2012-1290 http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a  View
217738 43258 CVE-2012-1290 52101  View
217739 43258 CVE-2012-1290 https://service.sap.com/sap/support/notes/1583300  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25863 JVNDB-2012-001570 SAP NetWeaver の b2b/auction/container.jsp におけるクロスサイトスクリプティングの脆弱性 SAP NetWeaver の Internet Sales (crm.b2b) モジュール内の b2b/auction/container.jsp には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1290 54528 CVE-2012-1290 43258 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001570.html 2012-02-23 2012-02-27 View