CVE-2023-29110
Low
Description
The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and lists, then an attacker can inject images from the foreign domains. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.
SeverityLow
CVSS3.7
Exploit probability—
Product
Sap Application Interface Framework
PublishedApr 11, 2023
First seenApr 11, 2023
Weakness typeCWE-80CWE-80
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap application_interface_framework | aif_703, aifx_702 | — |
| sap abap_platform | 75c, 75d, 75e | — |
| sap basis | 755, 756 | — |
| sap s4core | 100, 101 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.