6.1
CVSSv3

CVE-2023-49577

Published: 12/12/2023 Updated: 19/12/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The SAP HCM (SMART PAYE solution) - versions S4HCMCIE 100, SAP_HRCIE 600, SAP_HRCIE 604, SAP_HRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.

Vulnerable Product Search on Vulmon Subscribe to Product

sap human capital management s4hcmcie 100

sap human capital management sap hrcie 600

sap human capital management sap hrcie 604

sap human capital management sap hrcie 608