Products
SAP NetWeaver Application Server ABAP
SAP ABAP Platform
SAP NetWeaver ABAP Platform
Source
cna@sap.com
Tags
CVE-2024-32733 details
Last Modified : May 14, 2024, 7:17 p.m.
Description
Due to missing input validation and output encoding of untrusted data, SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject malicious JavaScript code into the dynamically crafted web page. On successful exploitation the attacker can access or modify sensitive information with no impact on availability of the application
CVSS Score
1 | 2 | 3 | 4 | 5 | 6.1 | 7 | 8 | 9 | 10 |
---|
Weakness
Weakness | Name | Description |
---|
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Base Score
6.1
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References
URL | Source |
---|---|
https://me.sap.com/notes/3450286 | cna@sap.com |
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 | cna@sap.com |