Description
SAP NetWeaver Enterprise Portal - version 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP NetWeaver Enterprise Portal | 7.50 | — |
Advisories 1
- WID-SEC-2023-1437 SAP Patchday Juni 2023 BSI CERT-Bund (WID) · Jun 12, 2023