Description
The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, for ABAP and ABAP Platform does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP | NetWeaver AS for ABAP and ABAP Platform | 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757 | — |
Advisories 2
- WID-SEC-2023-0356 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 13, 2023
- WID-SEC-2023-0040 SAP Patchday Januar 2023 BSI CERT-Bund (WID) · Jan 9, 2023