VYPR
← All advisories
Low severity3.7NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-29110

CVE-2023-29110

Description

The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and lists, then an attacker can inject images from the foreign domains. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.

Affected products

12
  • SAP/Abap Platform3 versions
    cpe:2.3:a:sap:abap_platform:75c:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:abap_platform:75c:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:75d:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:75e:*:*:*:*:*:*:*
  • SAP/Application Interface Framework2 versions
    cpe:2.3:a:sap:application_interface_framework:aif_703:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:application_interface_framework:aif_703:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:application_interface_framework:aifx_702:*:*:*:*:*:*:*
  • SAP/BASIS2 versions
    cpe:2.3:a:sap:basis:755:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:basis:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:basis:756:*:*:*:*:*:*:*
  • SAP/S4CORE2 versions
    cpe:2.3:a:sap:s4core:100:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:s4core:100:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s4core:101:*:*:*:*:*:*:*
  • SAP/Message Dashboardllm-create
  • SAP/Application Interfacellm-fuzzy
  • SAP/Application Interface (Message Dashboard)cpe-rescue
    Range: AIF 703

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.