CVE-2007-3495

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-06-27T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error page."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "37749", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37749"}, {"name": "2849", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2849"}, {"name": "20070627 SAP Internet Communication Framework (BC-MID-ICF) Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/472345/100/0/threaded"}, {"name": "sap-internet-multiple-xss(35107)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35107"}, {"name": "25866", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25866"}, {"name": "ADV-2007-2381", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/2381"}, {"tags": ["x_refsource_MISC"], "url": "http://www.csnc.ch/advisory/sap02.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-3495", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "37749", "refsource": "OSVDB", "url": "http://osvdb.org/37749"}, {"name": "2849", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2849"}, {"name": "20070627 SAP Internet Communication Framework (BC-MID-ICF) Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/472345/100/0/threaded"}, {"name": "sap-internet-multiple-xss(35107)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35107"}, {"name": "25866", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25866"}, {"name": "ADV-2007-2381", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/2381"}, {"name": "http://www.csnc.ch/advisory/sap02.html", "refsource": "MISC", "url": "http://www.csnc.ch/advisory/sap02.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:21:35.983Z"}, "title": "CVE Program Container", "references": [{"name": "37749", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/37749"}, {"name": "2849", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2849"}, {"name": "20070627 SAP Internet Communication Framework (BC-MID-ICF) Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/472345/100/0/threaded"}, {"name": "sap-internet-multiple-xss(35107)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35107"}, {"name": "25866", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25866"}, {"name": "ADV-2007-2381", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/2381"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.csnc.ch/advisory/sap02.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-3495", "datePublished": "2007-06-29T18:00:00.000Z", "dateReserved": "2007-06-29T00:00:00.000Z", "dateUpdated": "2024-08-07T14:21:35.983Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sap:sap_basis_component_640:*:*:*:*:*:*:*:*", "matchCriteriaId": "6AEEB988-54CE-4E13-AA3B-7C1C73732777", "versionEndIncluding": "sp19", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:sap_basis_component_700:*:*:*:*:*:*:*:*", "matchCriteriaId": "FE706CA3-FA62-4706-96E4-5FE0278A3ED3", "versionEndIncluding": "sp11", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error page."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en SAP Internet Communication Framework (BC-MID-ICF) en el componente de SAP Basis 700 anterior a SP12, y 640 anterior a SP20, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n mediante ciertos par\u00e1metros asociados con la p\u00e1gina de error por defecto del inicio de sesi\u00f3n."}], "id": "CVE-2007-3495", "lastModified": "2026-06-16T22:42:09.663", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-06-29T18:30:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/37749"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/25866"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2849"}, {"source": "cve@mitre.org", "url": "http://www.csnc.ch/advisory/sap02.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/472345/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/2381"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35107"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/37749"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/25866"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2849"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.csnc.ch/advisory/sap02.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/472345/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/2381"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35107"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}