Security Advisory

CVE-2022-39799

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-13 15:43:40

Last updated 2025-06-10 14:08:11

Assigner sap

CVSS score not scored

State PUBLISHED

Description

An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.

← Browse all CVEs View on cve.org ↗