SAP NetWeaver, SAP Web Application Server

ソフト名：SAP NetWeaver 7.00 Patch Number 95, SAP Web Application Server 7.00 Patch Number 95

回避策：あり

脆弱性：XSS, 機密情報の奪取, DoS攻撃, 不正HTMLの実行, スクリプトコード実行

ソース：

http://www.sdn.sap.com/irj/sdn/nw-70

http://www.sap.com/platform/netweaver/index.epx

https://service.sap.com/sap/support/notes/1553930

https://service.sap.com/sap/support/notes/1536640

https://service.sap.com/sap/support/notes/1556749

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2011-014

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2011-015

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2011-016

http://secunia.com/advisories/45951/

危険性：Medium Risk

SAP NetWeaver, SAP Web Application Server

ソフト名：SAP NetWeaver 7.x, SAP Web Application Server 6.x/7.x

回避策：あり

脆弱性：XSS, 不正HTMLの実行, スクリプトコード実行, リダイレクトエラー

ソース：http://www.sdn.sap.com/irj/sdn/nw-70

http://www.sap.com/platform/netweaver/index.epx

https://service.sap.com/sap/support/notes/1512134

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2011-003

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2011-004

http://secunia.com/advisories/44205/

危険性：Medium Risk