CVE-2024-22128

Summary

CVE-2024-22128 is a Cross-Site Scripting (XSS) vulnerability affecting various versions of SAP NWBC for HTML, including SAP_UI 754 to 758 and SAP_BASIS 700 to 731. The issue stems from insufficient input encoding, allowing an unauthenticated attacker to inject malicious JavaScript. Upon successful exploitation, the attacker can cause limited impact to the confidentiality and integrity of application data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.