Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to testsdic and the (2) helpstring parameter to paramhelp.jsp.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-07-28T21:00:00

Updated: 2024-08-07T02:46:48.596Z

Reserved: 2010-07-28T00:00:00

Link: CVE-2010-2904

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-07-28T21:30:02.650

Modified: 2024-11-21T01:17:36.193

Link: CVE-2010-2904

cve-icon Redhat

No data.