Security Advisory

CVE-2024-22126

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-13 01:58:27

Last updated 2025-02-11 04:13:01

Assigner sap

State PUBLISHED

Description

The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.

← Browse all CVEs View on cve.org ↗