CVE-2024-21738: Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform

First published: Tue Jan 09 2024(Updated: )

SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful exploitation.

Credit: cna@sap.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/type
• agent/first-publish-date
• collector/mitre-cve
• source/MITRE
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/author
• agent/title
• agent/last-modified-date
• agent/severity
• agent/weakness
• agent/softwarecombine
• agent/event
• collector/epss-latest
• source/FIRST
• agent/tags
• agent/description
• agent/epss
• vendor/sap
• canonical/sap netweaver application server abap
• version/sap netweaver application server abap/79
• version/sap netweaver application server abap/700
• version/sap netweaver application server abap/701
• version/sap netweaver application server abap/702
• version/sap netweaver application server abap/731
• version/sap netweaver application server abap/740
• version/sap netweaver application server abap/750
• version/sap netweaver application server abap/751
• version/sap netweaver application server abap/752
• version/sap netweaver application server abap/753
• version/sap netweaver application server abap/754
• version/sap netweaver application server abap/755
• version/sap netweaver application server abap/756
• version/sap netweaver application server abap/757
• version/sap netweaver application server abap/758
• version/sap netweaver application server abap/793