The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, for ABAP and ABAP Platform does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
2023-01-10T03:15:10.173
2024-11-21T07:36:23.607
Modified
CVSSv3.1: 6.1 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | sap | netweaver_application_server_abap | 702 | Yes |
Application | sap | netweaver_application_server_abap | 731 | Yes |
Application | sap | netweaver_application_server_abap | 740 | Yes |
Application | sap | netweaver_application_server_abap | 750 | Yes |
Application | sap | netweaver_application_server_abap | 751 | Yes |
Application | sap | netweaver_application_server_abap | 752 | Yes |
Application | sap | netweaver_application_server_abap | 753 | Yes |
Application | sap | netweaver_application_server_abap | 754 | Yes |
Application | sap | netweaver_application_server_abap | 755 | Yes |
Application | sap | netweaver_application_server_abap | 756 | Yes |
Application | sap | netweaver_application_server_abap | 757 | Yes |