CVE-2024-45279: Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel)
Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for ABAP allows an unauthenticated attacker to craft a URL link which could embed a malicious JavaScript. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45279?
CVE-2024-45279 is considered a critical vulnerability due to its potential for exploitation by unauthenticated attackers.
How do I fix CVE-2024-45279?
To fix CVE-2024-45279, apply the latest security patches provided by SAP for the NetWeaver Application Server for ABAP.
What impact does CVE-2024-45279 have on users?
CVE-2024-45279 allows attackers to execute malicious JavaScript on victim systems, leading to potential data theft or compromise.
Who is affected by CVE-2024-45279?
CVE-2024-45279 affects all versions of SAP NetWeaver Application Server for ABAP that are vulnerable to insufficient input validation.
Is CVE-2024-45279 a remote code execution vulnerability?
CVE-2024-45279 does not directly allow remote code execution but enables the execution of malicious scripts through crafted URLs.