SAP NetWeaver Enterprise Portal Cross-Site Scripting Vulnerability
CVE-2024-47594
5.4MEDIUM
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 8 October 2024
What is CVE-2024-47594?
SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick the user into clicking it. When a victim who is registered on the portal clicks on such link, confidentiality and integrity of their web browser session could be compromised.
Affected Version(s)
SAP NetWeaver Enterprise Portal (KMC) KMC-BC 7.5