CVE-2013-7365

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-10 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected products

SAP SE SAP Enterprise Portal: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2013-02/0132.html
http://scn.sap.com/docs/DOC-8218
http://www.onapsis.com/get.php?resid=adv_onapsis-2013-003
http://www.onapsis.com/research-advisories.php
http://www.securityfocus.com/bid/58155
https://service.sap.com/sap/support/notes/1589716
http://archives.neohapsis.com/archives/bugtraq/2013-02/0132.html
http://scn.sap.com/docs/DOC-8218
http://www.onapsis.com/get.php?resid=adv_onapsis-2013-003
http://www.onapsis.com/research-advisories.php
http://www.securityfocus.com/bid/58155
https://service.sap.com/sap/support/notes/1589716

Get alerted when CVE-2013-7365 or the next vulnerability affects your stack