CVE-2016-3975: XSS
Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to inject arbitrary web script or HTML via the navigationTarget parameter to irj/servlet/prt/portal/prteventname/XXX/prtroot/com.sapportals.navigation.testComponent.NavigationURLTester, aka SAP Security Note 2238375.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3975?
CVE-2016-3975 is considered a medium severity vulnerability due to the potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2016-3975?
To fix CVE-2016-3975, you should update your SAP NetWeaver AS Java to a patched version that addresses the XSS vulnerability.
Who is affected by CVE-2016-3975?
CVE-2016-3975 affects users of SAP NetWeaver Application Server Java versions 7.1 through 7.5.
What type of vulnerability is CVE-2016-3975?
CVE-2016-3975 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary scripts.
What can an attacker do with CVE-2016-3975?
An attacker exploiting CVE-2016-3975 can execute arbitrary web scripts or HTML in the context of the user's session.