Description
Cross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server (Java) 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field.
References
- 57000 vdb-entry
- http://www.dsecrg.com/pages/vul/show.php?id=133
- netweaver-uddi-xss(52429) vdb-entry
- 20090812 [DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability mailing-list
- 1022731 vdb-entry
- https://service.sap.com/sap/support/notes/1322098
- 36034 vdb-entry
- 36228 third-party-advisory