Home

CVE-2022-24395

Description

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.337

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in SAP NetWeaver Enterprise Portal (OBN component) 7.31Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Enterprise Portal (OBN component) 7.11Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Enterprise Portal (OBN component) 7.20Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Enterprise Portal (OBN component) 7.30Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Enterprise Portal (OBN component) 7.40Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Enterprise Portal (OBN component) 7.50Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Enterprise Portal (OBN component) 7.10Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234