SAP NetWeaver ABAP Application Server

SAP_BASIS 756

OTHER 1 CVE

SAP_BASIS 701

OTHER 1 CVE

SAP_BASIS 754

OTHER 1 CVE

SAP_BASIS 702

OTHER 1 CVE

SAP_BASIS 757

OTHER 1 CVE

SAP_BASIS 750

OTHER 1 CVE

SAP_BASIS 751

OTHER 1 CVE

SAP_BASIS 755

OTHER 1 CVE

SAP_BASIS 752

OTHER 1 CVE

SAP_BASIS 794

OTHER 1 CVE

SAP_BASIS 793

OTHER 1 CVE

SAP_BASIS 758

OTHER 1 CVE

SAP_BASIS 753

OTHER 1 CVE

SAP_BASIS 731

OTHER 1 CVE

SAP_BASIS 700

OTHER 1 CVE

SAP_BASIS 740

OTHER 1 CVE

CVE-2024-21738

SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful exploitation.

MEDIUM Jan 09, 2024