Skip to content
OpenAdvisories
Unscored CVE-2022-35298 EUVD-2022-38188GHSA-99f6-2857-qp6f

SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scriptin…

Published Sep 13, 2022 · Updated Aug 3, 2024 · Assigned by sap

Description

SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. KMC servlet is vulnerable to XSS attack. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser session.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver Enterprise Portal (KMC) 7.50 —

References