Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

sap enterprise portal - vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3

CVE-2022-35224

SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This attack can be used to non-permanently deface or modify portal content. The execution of scri...
Sap Enterprise Portal 7.10Sap Enterprise Portal 7.11Sap Enterprise Portal 7.20Sap Enterprise Portal 7.30Sap Enterprise Portal 7.31Sap Enterprise Portal 7.40Sap Enterprise Portal 7.50
6.1
CVSSv3

CVE-2018-2435

SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal
6.1
CVSSv3

CVE-2022-24395

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
6.1
CVSSv3

CVE-2021-33702

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malici...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
6.1
CVSSv3

CVE-2022-35170

SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to li...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
6.1
CVSSv3

CVE-2022-35172

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
6.1
CVSSv3

CVE-2022-35225

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to li...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
4.8
CVSSv3

CVE-2021-21489

SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This would allow an attacker with administrative privileges to store a malicious scri...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
6.1
CVSSv3

CVE-2022-26105

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker ...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
6.1
CVSSv3

CVE-2022-32247

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker ...
Sap Netweaver Enterprise Portal 7.31Sap Netweaver Enterprise Portal 7.11Sap Netweaver Enterprise Portal 7.20Sap Netweaver Enterprise Portal 7.30Sap Netweaver Enterprise Portal 7.40Sap Netweaver Enterprise Portal 7.50Sap Netweaver Enterprise Portal 7.10
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316firmwareCVE-2024-30078CVE-2024-5995remote code executionlogic flawCVE-2024-20693CVE-2024-37315CVE-2024-5464
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook