Description
SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to access and/or modify information related to the web client without affecting availability.
Problem types
CWE-79: Improper Neutralization of Input During Web Page Generation
Product status
S4COREOP 104
105
106
107
108
SEM-BW 600
602
603
604
605
634
736
746
747
748
