CVE-2024-22128

CVE-2024-22128 affects SAP NWBC for HTML. The issue is insufficient encoding of user-controlled inputs in versions SAP_UI 754–758 and SAP_BASIS 700–702, 731, enabling unauthenticated attackers to inject malicious JavaScript and impact confidentiality and integrity of application data after exploi...

CVE-2014-9569

CVE-2014-9569 affects SAP NetWeaver Business Client (NWBC) for HTML 3.0. The vulnerability is a cross-site scripting (XSS) issue in NWBC HTML 3.0, exploitable by remote attackers via the title or roundtrips parameters, enabling injection of arbitrary web script/HTML. Documents consistently refere...