CVE-2023-26457 — Cross-Site Scripting (XSS) vulnerability in SAP Content Server
SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an …
Published: 2023-03-14 · CVSS: 6.1 · CVSS 3.1
SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7