CVE-2013-6816

SAP Netweaver - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2) DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (5)

[Various Sources] http://scn.sap.com/docs/DOC-8218

[Vendor Advisory] http://secunia.com/advisories/55777

[Third Party Advisory] https://erpscan.io/advisories/erpscan-13-018-sap-netweaver-servlet-javadumpservice-multiple-xss/

[Third Party Advisory] https://erpscan.io/advisories/erpscan-13-019-sap-netweaver-servlet-datacollector-multiple-xss/

[Various Sources] https://service.sap.com/sap/support/notes/1828801

Scores

EPSS 0.0037

EPSS Percentile 58.2%

Details

CWE

CWE-79

Status published

Products (2)

sap/netweaver

n/a/n/a

Published Nov 20, 2013

Tracked Since Feb 18, 2026