PT-2022-17675
CVE-2022-26105
·
Published
2022-04-12
·
Updated
2022-04-19
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Enterprise Portal versions 7.10 through 7.50
Description
The issue is related to improper sanitization of user inputs, allowing an unauthenticated attacker to execute scripts. This can lead to viewing or modifying information, resulting in a limited impact on the confidentiality and integrity of the application.
Recommendations
For SAP NetWeaver Enterprise Portal versions 7.10 through 7.50, update to a version that properly sanitizes user inputs to prevent script execution attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾