Description (CNA)
SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702, 731 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP) | affected < SAP_UI - 750; affected < 752; affected < 753; affected < 754; affected < 755; affected < SAP_BASIS - 702; affected < 31 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
- https://launchpad.support.sap.com/#/notes/3025604
ADP enrichment
No English description supplied.