返回 CVE 瀏覽器

CVE-2016-4016

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0010%

EPSS Percentile17.61th

Published2016年4月14日

Last Modified2026年5月6日

Vulnerability Description

Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xapps~xmii~ui~admin~navigation/NavigationApplication, aka SAP Security Note 2201295.

Affected Platforms (CPE)

📦

Sap

Java As

= 7.4

References & Advisories

🔗 http://packetstormsecurity.com/files/137920/SAP-xMII-15-Cross-Site-Scripting.html

🔗 http://seclists.org/fulldisclosure/2016/Jul/46

🔗 https://erpscan.io/advisories/erpscan-16-021-sap-mii-reflected-xss-vulnerability/

🔗 https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/

🔗 http://packetstormsecurity.com/files/137920/SAP-xMII-15-Cross-Site-Scripting.html

🔗 http://seclists.org/fulldisclosure/2016/Jul/46

🔗 https://erpscan.io/advisories/erpscan-16-021-sap-mii-reflected-xss-vulnerability/

🔗 https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/

相關漏洞威脅

CVE-2019-1981010.0

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote un...

CVE-2020-628710.0

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which...

CVE-2019-1858010.0

Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A rem...

CVE-2020-2682110.0

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing ...