Skip to content
SecondTuesday

SAP Note 3377979

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP, applications based on SAPGUI for HTML (WebGUI)

MediumCVSS 5.4SAP NetWeaver AS ABAP applications based on SAPGUI for HTML
CVE(s)
CVE-2024-27902
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected products and versions

Appears in

Patch Days listing this note, newest first.

Open note on SAP for Me (SAP login required)