Unscored CVE-2019-0254 EUVD-2019-1027GHSA-7cwc-82pf-56c6

SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scr…

Published Feb 15, 2019 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP Disclosure Management

Description

SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
SAP SE	SAP Disclosure Management	< 10.1 Stack 1301	—

References

107004 vdb-entry
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
https://launchpad.support.sap.com/#/notes/2706798