Description
Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP NetWeaver (SAP Basis) | = 7.40 | — |
| SAP SE | SAP S/4HANA (SAP Basis) | = 7.50, = 7.51, = 7.52, = 7.53, = 7.54 | — |