← CVE Intelligence

CVE-2018-2470

SAP / SAP NetWeaver Application Server for ABAP PUBLISHED

Description (CNA)

In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected (CNA)

Vendor / productVersions
SAP / SAP NetWeaver Application Server for ABAPaffected from 7.0 to 7.02; affected 7.30; affected 7.31; affected 7.40; affected from 7.50 to 7.53

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.