Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-24323 2 Sap, Sap Se 4 Document Management System, Erp, S4core and 1 more 2026-02-17 6.1 Medium
The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.