Description
Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
References
- http://www.onapsis.com/get.php?resid=adv_onapsis-2013-003
- 20130222 [Onapsis Security Advisory 2013-003] SAP Enterprise Portal Cross-Site-Scripting mailing-list
- https://service.sap.com/sap/support/notes/1589716
- http://scn.sap.com/docs/DOC-8218
- 58155 vdb-entry
- http://www.onapsis.com/research-advisories.php