Vulnerability Details CVE-2019-0361
SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.8%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2019-0361
-
cpe:2.3:a:sap:supplier_relationship_management:3.73
-
cpe:2.3:a:sap:supplier_relationship_management:7.31
-
cpe:2.3:a:sap:supplier_relationship_management:7.32