Security Advisory

CVE-2024-21738

4.1
MEDIUM

Vulnerability Description

SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful exploitation.
Published Date January 9, 2024
Official Source NIST NVD Advisory