Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-37488

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Process Integration

Description

In SAP NetWeaver Process Integration - versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, user-controlled inputs, if not sufficiently encoded, could result in Cross-Site Scripting (XSS) attack. On successful exploitation the attacker can cause limited impact on confidentiality and integrity of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver Process Integration

Default version status: unaffected

  • SAP_XIESR 7.50affected
  • SAP_XITOOL 7.50affected
  • SAP_XIAF 7.50affected

References