CVE-2017-11460: XSS
Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shpresult.jsp, aka SAP Security Note 2308535.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11460?
The severity of CVE-2017-11460 is classified as medium, due to its ability to allow remote attackers to inject arbitrary web script or HTML.
How do I fix CVE-2017-11460?
To fix CVE-2017-11460, ensure that you apply the patches provided in SAP Security Note 2308535 for your SAP NetWeaver Portal 7.4.
What systems are affected by CVE-2017-11460?
CVE-2017-11460 affects SAP NetWeaver Portal version 7.4.
What type of vulnerability is CVE-2017-11460?
CVE-2017-11460 is classified as a cross-site scripting (XSS) vulnerability.
Can CVE-2017-11460 lead to data theft?
Yes, CVE-2017-11460 could potentially lead to data theft by enabling attackers to execute malicious scripts in users' browsers.