CVE-2021-33674

CVE-2021-33674 affects SAP Contact Center, version 700. The issue arises because user-controlled inputs are not sufficiently encoded, allowing a reflected XSS when creating a new email, potentially enabling arbitrary code execution in the victim’s browser. Exploitation details are not provided in...

CVE-2021-33673

CVE-2021-33673 affects SAP Contact Center (version 700). The vulnerability is a Stored XSS flaw caused by insufficient encoding of user-controlled inputs in the employee directory, with the attack chain potentially enabling arbitrary code execution in the victim’s browser. The issue is aggravated...

CVE-2021-33675

CVE-2021-33675 concerns SAP Contact Center, version 700, where input from users is not properly encoded, enabling a reflected XSS vulnerability that could allow an attacker to execute arbitrary code in the victim’s browser via phishing. The underlying issue is insufficient encoding of user-contro...

CVE-2021-33672

CVE-2021-33672 affects SAP Contact Center’s Communication Desktop component (v700). The vulnerability arises from missing encoding, allowing an attacker to send a malicious script in a chat message. Once the recipient accepts the message, the script executes in their context; due to ActiveX usage...