CVE-2023-40624

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP versions SAP UI 754 through SAP UI 758 SAP NetWeaver AS ABAP versions SAP BASIS 702, SAP BASIS 731

Description The issue allows an attacker to inject JavaScript code that can be executed in the web-application, potentially controlling the behavior of the application.

Recommendations For SAP NetWeaver AS ABAP versions SAP UI 754 through SAP UI 758, update to a version that includes the fix for this issue. For SAP NetWeaver AS ABAP versions SAP BASIS 702, SAP BASIS 731, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Unified Rendering application to minimize the risk of exploitation.