| CVE | CVE-2023-26457 |
| CVE Title | |
| Published Date | 2023-03-14T05:15Z |
| Modified Date | 2023-03-17T16:46Z |
| CWE Type | CWE-79 |
| CVSS 3.x | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| Description | SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data. |
| References | |
| By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
| Reference URL | https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html |
| Reference Description | MISC https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html |
| Reference URL | https://launchpad.support.sap.com/#/notes/3281484 |
| Reference Description | MISC https://launchpad.support.sap.com/#/notes/3281484 |
| Tags | Vendor Advisory |
| Sources | NIST MITRE |
