Skip to content
OpenAdvisories
Unscored CVE-2018-2470 EUVD-2018-14325GHSA-c32f-mgwg-wv5j

In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently en…

Published Oct 9, 2018 · Updated Aug 5, 2024 · Assigned by sap

Description

In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SAP NetWeaver Application Server for ABAP from 7.0 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.53 —

References