漏洞描述
SAP Knowledge Warehouse 7.30, 7.31, 7.40, and 7.50 contain a reflected cross-site scripting vulnerability via the usage of one SAP KW component within a web browser.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
seclists.orghttps://seclists.org/fulldisclosure/2022/Mar/32↗packetstormsecurity.comhttps://packetstormsecurity.com/files/166369/SAP-Knowledge-Warehouse-7.50-7.40-7.31-7.30-Cross-Site-Scripting.html↗twitter.comhttps://twitter.com/MrTuxracer/status/1505934549217382409↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-42063↗packetstormsecurity.comhttp://packetstormsecurity.com/files/166369/SAP-Knowledge-Warehouse-7.50-7.40-7.31-7.30-Cross-Site-Scripting.html↗