SAP Contact Center Cross-Site Scripting Vulnerability (CNVD-2023-00365)

SAP Contact Center, a new cloud service from SAP, is a modern contact center solution built on top of SAP’s on-premise contact center software that puts agents at their fingertips. The vulnerability stems from a program that does not properly encode input. An attacker could exploit the vulnerability to browse the employee directory and execute arbitrary code.