cve.bz

SAP Security Patch Day, February 2013: the CVEs

Filter

SAP Security Patch Day February 2013: the CVEs SAP published on 12 February 2013, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Microsoft, Adobe. Earlier: Jan 2013, Dec 2012, Nov 2012, Oct 2012, Sep 2012, Aug 2012, Jul 2012, Jun 2012, May 2012, Apr 2012, Mar 2012, Feb 2012. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. –CVE-2011-5263EPSS 1.3%

    Cross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the server parameter.

  2. –CVE-2011-5260EPSS 1.2%

    Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page parameter.