CVE-2024-45279 - SAP NetWeaver Application Server for ABAP Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2024-45279
Published : Sept. 10, 2024, 5:15 a.m. | 24 minutes ago
Description : Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for ABAP allows an unauthenticated attacker to craft a URL link which could embed a malicious JavaScript. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...