QwikSec

Security Database

CVE

CWE

Training

CVE-2022-35170

Published: Jul 12, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.

Vendor	Product	Versions
SAP SE	SAP NetWeaver Enterprise Portal	affected `7.10` affected `7.11` affected `7.20` affected `7.30` affected `7.31` +2 more versions

Weaknesses (CWE)

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

x_refsource_MISC

https://launchpad.support.sap.com/#/notes/3208819

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.