description: An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.
problem types: CWE-79
affected:
{
product: SAP NetWeaver AS ABAP (SAP GUI for HTML within the Fiori Launchpad)
vendor: SAP SE
versions:
status: affected, version: KERNEL 7.77
status: affected, version: 7.81
status: affected, version: 7.85
status: affected, version: 7.89
status: affected, version: 7.54
}