Description
SAP Commerce Backoffice does not sufficiently
encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)
vulnerability causing low impact on confidentiality and integrity of the
application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Commerce Backoffice | HY_COM 2205 | — |
Advisories 2
- NCSC-2024-0333 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Aug 13, 2024
- WID-SEC-2024-1818 SAP Security Patch Day – August 2024 BSI CERT-Bund (WID) · Aug 12, 2024