SAP NetWeaver Application Server ABAP Cross-Site Scripting Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in SAP NetWeaver Application Server ABAP. This issue allows malicious scripts to be executed within the application. While the vulnerability does not affect the application's availability, it could have minor implications for its confidentiality and integrity.

Impact

Exploitation of this vulnerability could lead to Cross-Site Scripting (XSS) attacks, allowing for the execution of malicious scripts in the context of the user's session.

Remediation

Users are advised to review and implement the SAP Security Notes available in SAP for Me. Security fixes for SAP NetWeaver based products are delivered with the support packages. For information on the latest SAP Security Patch Day, refer to the SAP Security Patch Day Bulletin.