Skip to content
OpenAdvisories
Unscored CVE-2022-26105 EUVD-2022-30673GHSA-jrq4-4399-2q2j

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauth…

Published Apr 12, 2022 · Updated Aug 3, 2024 · Assigned by sap

Description

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver Enterprise Portal 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 —

References