Unscored CVE-2018-2365 EUVD-2018-14220GHSA-xq8m-cc84-8x5q

SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site …

Published Mar 1, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver Portal WebDynpro RunTime

Description

SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
SAP SE	SAP NetWeaver Portal WebDynpro RunTime	7.30, 7.31, 7.40, 7.50	—

References

https://launchpad.support.sap.com/#/notes/2547977
102999 vdb-entry
https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/