CVE-2021-33702

HIGH Year: 2021
CVSS v3 Score
8.3
High
CVSS v2 Score
2.6
Low
Weakness Type
CWE-79
View all →

Vulnerability Description

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malicious script gets executed in the victim's browser, resulting in a Stored Cross-Site Scripting (XSS) vulnerability.

Related Vulnerabilities

CVE-2017-20192

HIGH
CVSS:8.3(High)

The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after_html' in versions before 2.05.03 due to ...

CWE-792017

CVE-2019-11543

HIGH
CVSS:8.3(High)

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX...

CWE-792019

CVE-2019-11982

HIGH
CVSS:8.3(High)

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier tha...

CWE-792019

CVE-2019-20374

HIGH
CVSS:8.3(High)

A mutation cross-site scripting (XSS) issue in Typora through 0.9.9.31.2 on macOS and through 0.9.81 on Linux leads to Remote Code Execution through Mermaid code blocks. To exploit this vulnerability,...

CWE-792019

CVE-2021-22978

HIGH
CVSS:8.3(High)

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versions, undisclosed endpoints in iControl REST allow for a ref...

CWE-792021

CVE-2021-33673

HIGH
CVSS:8.3(High)

Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting (X...

CWE-792021