5 matches found
EUVD-2026-54184
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
CVE-2026-71446
The CVE-2026-71446 vulnerability affects the AIL Framework, specifically the crawler domain view where crawled URLs are embedded directly into a JavaScript onclick handler for the stored screenshot feature. The root cause is inadequate encoding of the stored URL, allowing an attacker to inject Ja...
CVE-2021-33707
SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity...
