Back to search
CVE-2022-35224
Published: Jul 12, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This attack can be used to non-permanently deface or modify portal content. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim�s web browser session.
| Vendor | Product | Versions |
|---|---|---|
SAP SE | SAP Enterprise Portal | affected 7.10affected 7.11affected 7.20affected 7.30affected 7.31+2 more versions |
Weaknesses (CWE)
References
https://launchpad.support.sap.com/#/notes/3210779
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now