CVE-2017-11460

概要

参考情報

• securityfocus.com/bid/101826
• securityfocus.com/bid/97565 · Third Party Advisory
• erpscan.io/advisories/erpscan-17-016-sap-netweaver-java-7-4-dataarchivingservice-servlet-xss

netweaver portal のその他の脆弱性

• CVE-2021-33705高 8.1The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forger…
• CVE-2018-2365中 6.1SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site S…