SAP Application Server for ABAP Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in SAP Application Server for ABAP. This issue allows authenticated attackers to inject malicious JavaScript payloads that are executed in the context of the victim user's browser when accessing the affected functionality in the BAPI explorer. The vulnerability impacts several different versions and ranges of SAP Application Server for ABAP.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected JavaScript is executed in the context of the user.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.