← CVE Intelligence

CVE-2023-40624

Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering) PUBLISHED

Description (CNA)

SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 702, SAP_BASIS 731, allows an attacker to inject JavaScript code that can be executed in the web-application. An attacker could thereby control the behavior of this web-application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP NetWeaver AS ABAP (applications based on Unified Rendering)affected SAP_UI 754; affected SAP_UI 755; affected SAP_UI 756; affected SAP_UI 757; affected SAP_UI 758; affected SAP_BASIS 702; affected SAP_BASIS 731

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.