Description
SAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP Information Steward | < 4.2 | — |
Unscored
CVE-2019-0329
EUVD-2019-1102GHSA-x4xv-24j9-xf7v
SAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerab…
Published Jul 10, 2019 · Updated Aug 4, 2024 · Assigned by sap