CVE-2023-0021 (published 2023-03-14T04:34:41.118Z)
Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password, which could lead to reflected Cross-Site scripting. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.


Affected products: Vendor: SAP_SE
Product: SAP NetWeaver
Versions: 700, 701, 702, 731, 740, 750