CVE-2018-2504

Published: 2018-12-11T22:29Z

Last Modified: 2024-11-21T04:03Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting (XSS) vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt