SAP NetWeaver Java as xss Vulnerability (CVE-2016-3975)

SAP NetWeaver Java as xss Vulnerability (CVE-2016-3975)
SAP NetWeaver Java as xss Vulnerability (CVE-2016-3975)

Release date:
Updated on:

Affected Systems:

SAP NetWeaver Java AS 7.4

Description:

CVE (CAN) ID: CVE-2016-3975

SAP NetWeaver is the integrated technology platform of SAP and the technical foundation of all SAP applications since SAP Business Suite.

The SAP NetWeaver Java AS 7.4 Configuration Wizard has an XSS security vulnerability. Remote attackers can exploit this vulnerability to inject arbitrary Web scripts or HTML.

<* Source: vendor
*>

Suggestion:

Vendor patch:

SAP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://service.sap.com/sap/support/notes/

This article permanently updates the link address: