Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-33664 EUVD-2021-20341GHSA-g4rm-cj97-hgg6

SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702, 73…

Published Jun 9, 2021 · Updated Aug 3, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP)

Description

SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702, 731 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP) < SAP_UI - 750, < 752, < 753, < 754, < 755, < SAP_BASIS - 702, < 31 —

References