CVE-2024-47594
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Oct 8, 2024
Updated: Nov 14, 2024
CWE ID 79
Summary
CVE-2024-47594: A Cross-Site Scripting (XSS) vulnerability has been discovered in SAP NetWeaver Enterprise Portal's Knowledge Management Component (KMC). This issue stems from insufficient input encoding by KMC servlet, allowing attackers to inject malicious scripts. Victims, who are registered on the portal, could be duped into clicking a specially crafted link. Once clicked, an attacker could gain unauthorized access to the victim's web browser session, compromising both confidentiality and integrity of their information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- SAP SE