CVE-2019-0329: XSS
Published Jul 10, 2019
·Updated
SAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected Software
1 affected component
SAP Information Steward=4.2
Event History
Jul 10, 2019
CVE Published
via MITRE·07:11 PM
Data Sourced
via MITRE·07:11 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-0329?
The severity of CVE-2019-0329 is classified as medium due to its ability to allow Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2019-0329?
To fix CVE-2019-0329, ensure that user-controlled inputs are properly encoded before being rendered to prevent XSS.
3
What systems are affected by CVE-2019-0329?
CVE-2019-0329 affects SAP Information Steward version 4.2.
4
What type of vulnerability is CVE-2019-0329?
CVE-2019-0329 is a Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2019-0329 be exploited remotely?
Yes, CVE-2019-0329 can potentially be exploited remotely, allowing attackers to execute scripts in the context of an affected user's session.