CVE-2024-47594 — Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)
SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craf…
Published: 2024-10-08 · CVSS: 5.4 · CVSS 3.1
SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick the user into clicking it. When a victim who is registered on the portal clicks on such link, confidentiality and integrity of their web browser session could be compromised.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7