CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3358

Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URI, which causes the XSS payload to be reflected in a text/plain document.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.8%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2008-3358

Microsoft » Internet Explorer » Version: 7.0.5730

cpe:2.3:a:microsoft:internet_explorer:7.0.5730
Sap » Netweaver » Version: N/A

cpe:2.3:a:sap:netweaver:-
Sap » Netweaver » Version: 2004s

cpe:2.3:a:sap:netweaver:2004s
Sap » Netweaver » Version: 4.0

cpe:2.3:a:sap:netweaver:4.0
Sap » Netweaver » Version: 6.4

cpe:2.3:a:sap:netweaver:6.4
Sap » Netweaver » Version: 600

cpe:2.3:a:sap:netweaver:600
Sap » Netweaver » Version: 602

cpe:2.3:a:sap:netweaver:602
Sap » Netweaver » Version: 603

cpe:2.3:a:sap:netweaver:603
Sap » Netweaver » Version: 604

cpe:2.3:a:sap:netweaver:604
Sap » Netweaver » Version: 605

cpe:2.3:a:sap:netweaver:605
Sap » Netweaver » Version: 606

cpe:2.3:a:sap:netweaver:606
Sap » Netweaver » Version: 617

cpe:2.3:a:sap:netweaver:617
Sap » Netweaver » Version: 618

cpe:2.3:a:sap:netweaver:618
Sap » Netweaver » Version: 7.0

cpe:2.3:a:sap:netweaver:7.0
Sap » Netweaver » Version: 7.01

cpe:2.3:a:sap:netweaver:7.01
Sap » Netweaver » Version: 7.02

cpe:2.3:a:sap:netweaver:7.02
Sap » Netweaver » Version: 7.03

cpe:2.3:a:sap:netweaver:7.03
Sap » Netweaver » Version: 7.1

cpe:2.3:a:sap:netweaver:7.1
Sap » Netweaver » Version: 7.10

cpe:2.3:a:sap:netweaver:7.10
Sap » Netweaver » Version: 7.11

cpe:2.3:a:sap:netweaver:7.11
Sap » Netweaver » Version: 7.2

cpe:2.3:a:sap:netweaver:7.2
Sap » Netweaver » Version: 7.20

cpe:2.3:a:sap:netweaver:7.20
Sap » Netweaver » Version: 7.22ext

cpe:2.3:a:sap:netweaver:7.22ext
Sap » Netweaver » Version: 7.3

cpe:2.3:a:sap:netweaver:7.3
Sap » Netweaver » Version: 7.30

cpe:2.3:a:sap:netweaver:7.30
Sap » Netweaver » Version: 7.31

cpe:2.3:a:sap:netweaver:7.31
Sap » Netweaver » Version: 7.4

cpe:2.3:a:sap:netweaver:7.4
Sap » Netweaver » Version: 7.40

cpe:2.3:a:sap:netweaver:7.40
Sap » Netweaver » Version: 7.41

cpe:2.3:a:sap:netweaver:7.41
Sap » Netweaver » Version: 7.49

cpe:2.3:a:sap:netweaver:7.49
Sap » Netweaver » Version: 7.5

cpe:2.3:a:sap:netweaver:7.5
Sap » Netweaver » Version: 7.50

cpe:2.3:a:sap:netweaver:7.50
Sap » Netweaver » Version: 7.51

cpe:2.3:a:sap:netweaver:7.51
Sap » Netweaver » Version: 7.52

cpe:2.3:a:sap:netweaver:7.52
Sap » Netweaver » Version: 7.53

cpe:2.3:a:sap:netweaver:7.53
Sap » Netweaver » Version: 7.77

cpe:2.3:a:sap:netweaver:7.77
Sap » Netweaver » Version: 7.81

cpe:2.3:a:sap:netweaver:7.81
Sap » Netweaver » Version: 7.85

cpe:2.3:a:sap:netweaver:7.85
Sap » Netweaver » Version: 7.86

cpe:2.3:a:sap:netweaver:7.86
Sap » Netweaver » Version: 700

cpe:2.3:a:sap:netweaver:700
Sap » Netweaver » Version: 701

cpe:2.3:a:sap:netweaver:701
Sap » Netweaver » Version: 702

cpe:2.3:a:sap:netweaver:702
Sap » Netweaver » Version: 707

cpe:2.3:a:sap:netweaver:707
Sap » Netweaver » Version: 730

cpe:2.3:a:sap:netweaver:730
Sap » Netweaver » Version: 731

cpe:2.3:a:sap:netweaver:731
Sap » Netweaver » Version: 737

cpe:2.3:a:sap:netweaver:737
Sap » Netweaver » Version: 740

cpe:2.3:a:sap:netweaver:740
Sap » Netweaver » Version: 7400.12.21.30308

cpe:2.3:a:sap:netweaver:7400.12.21.30308
Sap » Netweaver » Version: 747

cpe:2.3:a:sap:netweaver:747
Sap » Netweaver » Version: 750

cpe:2.3:a:sap:netweaver:750
Sap » Netweaver » Version: 751

cpe:2.3:a:sap:netweaver:751
Sap » Netweaver » Version: 752

cpe:2.3:a:sap:netweaver:752
Sap » Netweaver » Version: 753

cpe:2.3:a:sap:netweaver:753
Sap » Netweaver » Version: 754

cpe:2.3:a:sap:netweaver:754
Sap » Netweaver » Version: 755

cpe:2.3:a:sap:netweaver:755
Sap » Netweaver » Version: 756

cpe:2.3:a:sap:netweaver:756
Sap » Netweaver » Version: 757

cpe:2.3:a:sap:netweaver:757
Sap » Netweaver » Version: 800

cpe:2.3:a:sap:netweaver:800
Sap » Netweaver » Version: 802

cpe:2.3:a:sap:netweaver:802
Sap » Netweaver » Version: 803

cpe:2.3:a:sap:netweaver:803
Sap » Netweaver » Version: 804

cpe:2.3:a:sap:netweaver:804
Sap » Netweaver » Version: 805

cpe:2.3:a:sap:netweaver:805
Sap » Netweaver » Version: 806

cpe:2.3:a:sap:netweaver:806
Sap » Netweaver » Version: 807

cpe:2.3:a:sap:netweaver:807
Sap » Netweaver » Version: application_server_java

cpe:2.3:a:sap:netweaver:application_server_java
Sap » Netweaver » Version: kernel_7.22

cpe:2.3:a:sap:netweaver:kernel_7.22
Sap » Netweaver » Version: kernel_7.53

cpe:2.3:a:sap:netweaver:kernel_7.53
Sap » Netweaver » Version: kernel_7.54

cpe:2.3:a:sap:netweaver:kernel_7.54
Sap » Netweaver » Version: krnl64nuc_7.22

cpe:2.3:a:sap:netweaver:krnl64nuc_7.22
Sap » Netweaver » Version: krnl64nuc_7.22ext

cpe:2.3:a:sap:netweaver:krnl64nuc_7.22ext
Sap » Netweaver » Version: krnl64uc_7.22

cpe:2.3:a:sap:netweaver:krnl64uc_7.22
Sap » Netweaver » Version: krnl64uc_7.22ext

cpe:2.3:a:sap:netweaver:krnl64uc_7.22ext
Sap » Netweaver » Version: krnl64uc_7.53

cpe:2.3:a:sap:netweaver:krnl64uc_7.53
Sap » Netweaver » Version: webdisp_7.22ext

cpe:2.3:a:sap:netweaver:webdisp_7.22ext
Sap » Netweaver » Version: webdisp_7.53

cpe:2.3:a:sap:netweaver:webdisp_7.53
Sap » Netweaver » Version: webdisp_7.54

cpe:2.3:a:sap:netweaver:webdisp_7.54

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3358

Products

Pricing

Contact Us