CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40624

SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 702, SAP_BASIS 731, allows an attacker to inject JavaScript code that can be executed in the web-application. An attacker could thereby control the behavior of this web-application.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.6%

CVSS Severity

CVSS v3 Score 5.5

References

Products affected by CVE-2023-40624

Sap » Netweaver Application Server Abap » Version: 702

cpe:2.3:a:sap:netweaver_application_server_abap:702
Sap » Netweaver Application Server Abap » Version: 731

cpe:2.3:a:sap:netweaver_application_server_abap:731
Sap » Netweaver Application Server Abap » Version: 754

cpe:2.3:a:sap:netweaver_application_server_abap:754
Sap » Netweaver Application Server Abap » Version: 755

cpe:2.3:a:sap:netweaver_application_server_abap:755
Sap » Netweaver Application Server Abap » Version: 756

cpe:2.3:a:sap:netweaver_application_server_abap:756
Sap » Netweaver Application Server Abap » Version: 757

cpe:2.3:a:sap:netweaver_application_server_abap:757
Sap » Netweaver Application Server Abap » Version: 758

cpe:2.3:a:sap:netweaver_application_server_abap:758

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40624

Products

Pricing

Contact Us