DOM-Based Cross-Site Scripting Vulnerability in SAP Products

CVE-2026-76975

What is CVE-2026-76975?

A DOM-Based Cross-Site Scripting (XSS) vulnerability exists within several SAP products, allowing unauthenticated attackers to create malicious links accessible to authenticated users. When these users visit the link, the attacker-controlled input is processed without proper sanitization, enabling the execution of unauthorized scripts in the user's browser context. This poses a risk to data confidentiality and integrity as attackers may gain access to modify sensitive information within the user's browser. Users should remain vigilant and ensure proper security measures are in place.

References