SAP Note 3377979
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)
MediumCVSS 5.4SAP NetWeaver AS ABAP applications based on SAPGUI for HTML
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2024-27902
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products and versions
- Product SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)
Versions: 7.89, 7.93
Appears in
Patch Days listing this note, newest first.
- March 2024MediumCVSS 5.4