Riskcovery

CVE-2019-0311

State
Published
Severity
Not scored
Published
Jun 12, 2019
Updated
Aug 4, 2024
Reserved
Nov 26, 2018

Read the record on cve.org

Description

Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious code there, resulting in Cross-Site Scripting (XSS) vulnerability.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP R/3 Enterprise ApplicationSAP SE
  • < 6.0Affected
  • < 6.02Affected
  • < 6.03Affected
  • < 6.04Affected
  • < 6.05Affected
  • < 6.06Affected
  • < 6.16Affected
  • < 6.17Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.