CVE-2024-45280: SAP SE SAP NetWeaver As Java Logon Application

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in the login application. This has a limited impact on confidentiality and integrity of the application. There is no impact on availability.

Affected products

• SAP SE SAP NetWeaver As Java Logon Application: version 7.50 only

Published 2024-09-10. Last modified 2026-06-17.