| Package | Affected versions | Patched versions |
|---|---|---|
| sap basis | = 700= 701= 702= 731= 740= 750= 751= 752= 753= 754= 755= 756= 757= 758= 795= 796 |
SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, including accessing or deleting files, or stealing session cookies which an attacker could use to hijack a user’s session. Hence, this could have impact on Confidentiality, Integrity and Availability of the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free