Skip to content
OpenAdvisories
Unscored CVE-2022-35297 EUVD-2022-38187GHSA-8f87-pmx7-ffqx

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being…

Published Oct 11, 2022 · Updated Aug 3, 2024 · Assigned by sap

Description

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability.

Affected products

VendorProductAffectedFixed
SAP SE SAP Enable Now 10 —

References