Description
The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP_SE SAP Document Management System
Default version status: unaffected
SAP_APPL 618affectedS4CORE 102affected103affected104affected105affected106affected107affected108affected109affectedEA-APPL 600affected602affected603affected604affected605affected606affected617affected