CVE-2011-4707
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver...
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet.
- Record
CVE-2011-4707- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet.
- Record
CVE-2011-4707- Updated
- 2026-11-02
EUVDEUVD-2011-4625 No score
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet.
- Record
EUVD-2011-4625- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h6m8-6j3f-jm22 No score
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver...
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet.
- Record
GHSA-h6m8-6j3f-jm22- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4707 is a medium vulnerability (CVSS 4.3) in Sap Netweaver, published December 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/520554/100/0/threaded
dsecrg.com/pages/vul/show.php?id=336
sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a
erpscan.io/advisories/dsecrg-11-036-sap-netwaver-virus-scan-interface-multiple-xss
service.sap.com/sap/support/notes/1546307
nvd.nist.gov/vuln/detail/CVE-2011-4707
github.com/advisories/GHSA-h6m8-6j3f-jm22