cbcvebase.
CVE-2024-45279
published 2024-09-10

CVE-2024-45279: Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for ABAP allows an unauthenticated attacker…

PriorityP430medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.26%
16.8th percentile
Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for ABAP allows an unauthenticated attacker to craft a URL link which could embed a malicious JavaScript. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.

Affected

15 ranges
VendorProductVersion rangeFixed in
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
sap_sesap_netweaver_application_server_for_abap——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.