Skip to content
OpenAdvisories
Unscored CVE-2019-0275 EUVD-2019-1048GHSA-jw7x-9hx7-cp99

SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50,…

Published Mar 12, 2019 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver Java Application Server (J2EE-APPS)

Description

SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficiently encode user-controlled inputs, which results in cross-site scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver Java Application Server (J2EE-APPS) < 7.10 to 7.11, < 7.20, < 7.30, < 7.31, < 7.40, < 7.50 —

References