CVE-2007-3495
SAP Basis Component 640 < SP19 and 700 < SP11 - Cross-Site Scripting via Login Error Page Parameters
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error page.
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/37749
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/2849
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/472345/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35107
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25866
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2381
Vendor Advisory x_refsource_misc
http://www.csnc.ch/advisory/sap02.html
Scores
EPSS
0.0051
EPSS Percentile
66.4%
Details
Status
published
Products (2)
sap/sap_basis_component_640
< sp19
sap/sap_basis_component_700
< sp11
Published
Jun 29, 2007
Tracked Since
Feb 18, 2026