Skip to content
OpenAdvisories
Unscored CVE-2022-29618 EUVD-2022-33949GHSA-gv2x-f8q9-774h

Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, …

Published Jun 14, 2022 · Updated Aug 3, 2024 · Assigned by sap

Description

Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to inject script into the URL and execute code in the user’s browser. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver Development Infrastructure (Design Time Repository) 7.30, 7.31, 7.40, 7.50 —

References