CVE-2024-22126
Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)
The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.
Reserved 2024-01-05 | Published 2024-02-13 | Updated 2025-02-11 | Assigner sapCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
www.sap.com/.../02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Support options
