cveboard RSS feed

CVE-2023-0013

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, for ABAP and ABAP Platform does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

NetWeaver AS for ABAP and ABAP Platform

Vendor
SAP
Product
NetWeaver AS for ABAP and ABAP Platform
Platforms
Unknown
Default status
unaffected
NetWeaver AS for ABAP and ABAP Platform · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
702affectedUnavailableUnavailableUnavailableNone listed
731affectedUnavailableUnavailableUnavailableNone listed
740affectedUnavailableUnavailableUnavailableNone listed
750affectedUnavailableUnavailableUnavailableNone listed
751affectedUnavailableUnavailableUnavailableNone listed
752affectedUnavailableUnavailableUnavailableNone listed
753affectedUnavailableUnavailableUnavailableNone listed
754affectedUnavailableUnavailableUnavailableNone listed
755affectedUnavailableUnavailableUnavailableNone listed
756affectedUnavailableUnavailableUnavailableNone listed
757affectedUnavailableUnavailableUnavailableNone listed