CVE-2021-33703
published 2021-08-10CVE-2021-33703: Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a…
medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | netweaver_enterprise_portal | — | — |
| sap | netweaver_enterprise_portal | — | — |
| sap | netweaver_enterprise_portal | — | — |
| sap | netweaver_enterprise_portal | — | — |
| sap_se | sap_netweaver_enterprise_portal | < 7.30 | 7.30 |
| sap_se | sap_netweaver_enterprise_portal | < 7.31 | 7.31 |
| sap_se | sap_netweaver_enterprise_portal | < 7.40 | 7.40 |
| sap_se | sap_netweaver_enterprise_portal | < 7.50 | 7.50 |