CVE-2023-40624: SAP NetWeaver Application Server Abap

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 702, SAP_BASIS 731, allows an attacker to inject JavaScript code that can be executed in the web-application. An attacker could thereby control the behavior of this web-application.

Affected products

• SAP NetWeaver Application Server Abap: version 702 only; version 731 only; version 754 only; version 755 only; version 756 only; version 757 only; …

Published 2023-09-12. Last modified 2026-06-17.