Vulnerabilities > SAP > Netweaver AS Abap Business Server Pages > 755

DATE CVE VULNERABILITY TITLE RISK
2023-02-14 CVE-2023-24521 Cross-site Scripting vulnerability in SAP Netweaver AS Abap Business Server Pages
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data.
network
low complexity
sap CWE-79
6.1
2020-09-09 CVE-2020-6324 Cross-site Scripting vulnerability in SAP Netweaver AS Abap Business Server Pages
SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim?s browser leading to Reflected Cross Site Scripting.
network
low complexity
sap CWE-79
6.1