Approved changes feed: RSS · Atom

cpe:2.3:a:sap:web_dispatcher:9.13:*:*:*:*:*:*:*

part: a version: 9.13 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductWeb Dispatcher (d34d35ec-4397-5744-824b-669857196925)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47590 vulnerable 2026-06-08 06:48:12.909780 Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher
HIGH (8.8)
An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input data will be used by the web site page generation to create content which when executed in the victim's browser (XXS) or transmitted to another server (SSRF) gives the attacker the ability to execute arbitrary code on the server fully compromising confidentiality, integrity and availability.
Published: 2024-11-12T00:26:18.659Z
Updated: 2024-11-12T17:11:38.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.