[ERPSCAN-15-019] SAP Afaria – Stored XSS

Posted by ERPScan inc on Nov 24

Application: SAP Afaria
Versions Affected: SAP Afaria 7, probably others
Vendor URL: http://SAP.com
Bugs: Stored XSS
Send: 18.02.2015
Reported: 18.02.2015
Vendor response: 18.02.2015
Date of Public Advisory: 11.08.2015
Reference: SAP Security Note 2152669
Author: Dmitry Chastukhin (ERPScan)

Description

1. ADVISORY INFORMATION
Title: SAP Afaria – Stored XSS
Advisory ID: [ERPSCAN-15-019]
Risk:…