| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver as abap business server pages | = 7.00= 7.01= 7.02= 7.10= 7.11= 7.30= 7.31= 7.40= 7.50= 7.51= 7.52= 7.53= 7.54 |
SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, 7.51, 7.52, 7.53, 7.54; does not sufficiently encode user controlled inputs, allowing an unauthenticated attacker to non-permanently deface or modify displayed content and/or steal authentication information of the user and/or impersonate the user and access all information with the same rights as the target user, leading to Reflected Cross Site Scripting Vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free