Skip to content
OpenAdvisories
Unscored CVE-2021-38183 EUVD-2021-24653GHSA-f9gf-3986-8cqm

SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential…

Published Oct 12, 2021 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential victim to supply a malicious content to a vulnerable web application, which is then reflected to the victim and executed by the web browser, resulting in Cross-Site Scripting vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver < 700, < 701, < 702, < 730 —

References