CVE-2023-26457 (published 2023-03-14T04:53:30.369Z)
SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data.


Affected products: Vendor: SAP
Product: Content Server
Versions: 7.53