| Package | Affected versions | Patched versions |
|---|---|---|
| document management system | = 600= 602= 603= 604= 605= 606= 617 | |
| erp | = 618 | |
| s4core | = 102= 103= 104= 105= 106= 107= 108 |
The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free