CVE 4.7 MEDIUM

Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)_CVE-2026-27682

4.7 / 10
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an unauthenticated attacker could craft a URL that exploits an unprotected URL parameter to embed a malicious script. If a victim clicks the link, the injected input is processed during web page generation, resulting in the execution of malicious content in the victim๏ฟฝs browser context. This could allow the attacker to access and/or modify information, impacting the confidentiality and integrity of the application, with no impact to availability.

Basic Information

ID CVE-2026-27682
Source sap
Published May 12, 2026 at 02:19

Affected Product

Vendor SAP_SE
Product SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)
Version SAP_BASIS 700
Affected Versions SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 700
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 701
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 702
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 731
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 740
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 750
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 751
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 752
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 753
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 754
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 755
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 756
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 757
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 758
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 816
SAP_SE SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) SAP_BASIS 918

CWE Classification

References

๐Ÿ’ญ Join the Security Discussion

๐Ÿ”’ Your email address will not be published. Required fields are marked *

โš ๏ธ Please be respectful and constructive in your comments. Security discussions should remain professional.