Security Advisory

CVE-2024-41735

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-13 03:49:48
Last updated 2024-08-13 14:44:24
Assigner sap
State PUBLISHED

Description

SAP Commerce Backoffice does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability causing low impact on confidentiality and integrity of the application.