Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver enterprise portal 7.20 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2018-2435
SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise PortalSap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.50
4.3
CVSSv2
CVE-2022-35170
SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to li...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
4.3
CVSSv2
CVE-2022-35172
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
4.3
CVSSv2
CVE-2022-35225
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to li...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
4.3
CVSSv2
CVE-2022-32247
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker ...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
2.6
CVSSv2
CVE-2021-33702
Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malici...
Sap Netweaver Enterprise Portal 7.10Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50
4.3
CVSSv2
CVE-2022-26105
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker ...
Sap Netweaver Enterprise Portal 7.10Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50
4.3
CVSSv2
CVE-2022-24395
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver Enterprise Portal 7.10Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50
3.5
CVSSv2
CVE-2021-21489
SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This would allow an attacker with administrative privileges to store a malicious scri...
Sap Netweaver Enterprise Portal 7.10Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50
5.8
CVSSv2
CVE-2021-33705
The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forgery (SSRF) vulnerability which allows an unauthenticated malicious user to craft a malicious URL which when clicked by a user can make any typ...
Sap Netweaver Portal 7.10Sap Netweaver Portal 7.11Sap Netweaver Portal 7.20Sap Netweaver Portal 7.30Sap Netweaver Portal 7.31Sap Netweaver Portal 7.40Sap Netweaver Portal 7.50
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook