Vulnerability CVE-2024-41735
Published: 2024-08-13

Description:
SAP Commerce Backoffice does not sufficiently
encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)
vulnerability causing low impact on confidentiality and integrity of the
application.

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://me.sap.com/notes/3483256
https://url.sap/sapsecuritypatchday
Copyright 2026, cxsecurity.com

 

Back to Top