Skip to content
OpenAdvisories

Product · SAP

SAP NetWeaver Visual Composer

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-120016

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Visual Composer

    SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data. An unauthenticated attacker could craft a malicious link containing specially crafted input. If a victim clicks the link, the injected scri…

    SAP SAP NetWeaver Visual Composer