sap Application Interface Framework (Message Monitoring) vulnerabilities

Latest sap Application Interface Framework (Message Monitoring) CVEs

Newest publication first

1. CVE-2023-29112 Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)

   Published 2023-04-11

   Low·CVSS 3.7

   The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or headings with custom CSS classes into a comment. The comment will render links and custom CSS classes as HTML objects. After successful exploitations, an attack...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.