Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-22128
HistoryFeb 13, 2024 - 2:15 a.m.

Cross site scripting

2024-02-1302:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
sap nwbc
sap_ui
sap_basis
input encoding
attacker
javascript
confidentiality
integrity
nvd

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

SAP NWBC for HTML - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can inject malicious javascript to cause limited impact to confidentiality and integrity of the application data after successful exploitation.

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for PRION:CVE-2024-22128