2 results (0.002 seconds)
CVSS: 6.1EPSS: 0%CPEs: 8EXPL: 0
CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0

CVE-2017-15294
https://notcve.org/view.php?id=CVE-2017-15294
16 Oct 2017 — The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. La consola de administración Java en SAP CRM tiene XSS. Esto corresponde con SAP Security Note 2478964. • http://www.securityfocus.com/bid/99532 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2017-15296
https://notcve.org/view.php?id=CVE-2017-15296
16 Oct 2017 — The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. El componente Java en SAP CRM tiene CSRF. Esto corresponde con SAP Security Note 2478964. • https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017 • CWE-352: Cross-Site Request Forgery (CSRF) •