mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
137 lines
5.7 KiB
JSON
137 lines
5.7 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2024-32733",
|
|
"ASSIGNER": "cna@sap.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "\nDue to missing input validation and output encoding of untrusted data, SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject malicious JavaScript code into the dynamically crafted web page. On successful exploitation the attacker can access or modify sensitive information with no impact on availability of the application\n\n"
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
|
"cweId": "CWE-79"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "SAP_SE",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "SAP NetWeaver Application Server ABAP and ABAP Platform ",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 740"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 750"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 751"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 752"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 753"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 754"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 755"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 756"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 757"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 758"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 795"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "SAP_BASIS 796"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://me.sap.com/notes/3450286",
|
|
"refsource": "MISC",
|
|
"name": "https://me.sap.com/notes/3450286"
|
|
},
|
|
{
|
|
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
|
|
"refsource": "MISC",
|
|
"name": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364"
|
|
}
|
|
]
|
|
},
|
|
"generator": {
|
|
"engine": "Vulnogram 0.1.0-dev"
|
|
},
|
|
"source": {
|
|
"discovery": "UNKNOWN"
|
|
},
|
|
"impact": {
|
|
"cvss": [
|
|
{
|
|
"attackComplexity": "LOW",
|
|
"attackVector": "NETWORK",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 6.1,
|
|
"baseSeverity": "MEDIUM",
|
|
"confidentialityImpact": "LOW",
|
|
"integrityImpact": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"scope": "CHANGED",
|
|
"userInteraction": "REQUIRED",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
|
|
"version": "3.1"
|
|
}
|
|
]
|
|
}
|
|
} |