CVE-2022-26105Cross-site Scripting in SE SAP Netweaver Enterprise Portal

Severity
6.1MEDIUMNVD
EPSS
1.3%
top 20.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 12
Latest updateApr 13

Description

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-jrq4-4399-2q2j: SAP NetWeaver Enterprise Portal - versions 72022-04-13
CVEList
CVE-2022-26105: SAP NetWeaver Enterprise Portal - versions 72022-04-12
CVE-2022-26105 — Cross-site Scripting | cvebase