Description (CNA)
SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to access and/or modify information related to the web client without affecting availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP NetWeaver Application Server ABAP (BIC Document) | affected S4COREOP 104; affected 105; affected 106; affected 107; affected 108; affected SEM-BW 600; affected 602; affected 603; affected 604; affected 605; affected 634; affected 736; affected 746; affected 747; affected 748 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.