medium4.1
CVE-2024-21738
SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabilit…
Impact
SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful exploitation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver Application Server Abap | Versions 79, 700, 701, 702, 731, 740 |