SAP HCM Travel Management Cross-Site Scripting Vulnerability

2023-12-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

sap

hcm

travel management

cross-site scripting

vulnerability

user input

exploited

attack

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

SAP HCM Travel Management is a travel management module from SAP. A cross-site scripting vulnerability exists in SAP HCM Travel Management that stems from insufficiently encoded user input and can be exploited by an attacker to cause a cross-site scripting (XSS) attack.