medium6.1
CVE-2022-39799
An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site sc…
Impact
An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver Application Server Abap | Versions 7.54, 7.81, 7.85, 7.89, kernel_7.77 |