Skip to content
OpenAdvisories
Unscored CVE-2018-2435 EUVD-2018-14290GHSA-6xrr-gr25-qh39

SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, …

Published Jul 10, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver Enterprise Portal

Description

SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SAP NetWeaver Enterprise Portal = 7.0 to 7.02, = 7.11, = 7.20, = 7.30, = 7.31, = 7.40, = 7.50 —

References