Field Assessment
AI analysis pending.
CVE
CVE-2017-11460
Severity
MEDIUM
CVSS
6.1
EPSS
1.15%
Original Filing — NVD Description
Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shp_result.jsp, aka SAP Security Note 2308535.