SAP NetWeaver AS JAVA (User Admin Application) vulnerabilities

1 known vulnerability in SAP NetWeaver AS JAVA (User Admin Application) from SAP. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SAP NetWeaver AS Java (User Admin Application): Improper Neutralization of Input During Web Page Generation

  CVE-2024-22126Feb 13, 2024SAP

  The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading t