Description
SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, 7.51, 7.52, 7.53, 7.54; does not sufficiently encode user controlled inputs, allowing an unauthenticated attacker to non-permanently deface or modify displayed content and/or steal authentication information of the user and/or impersonate the user and access all information with the same rights as the target user, leading to Reflected Cross Site Scripting Vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP SE SAP NetWeaver Application Server ABAP (Smart Forms) - SAP_BASIS
< 7.00affected< 7.01affected< 7.02affected< 7.10affected< 7.11affected< 7.30affected< 7.31affected< 7.40affected< 7.50affected< 7.51affected< 7.52affected< 7.53affected< 7.54affected