What the vulnerability does
01Description
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
CVSS base score
—
Key dates
02Disclosure timeline
July 12, 2022
CVE published
August 3, 2024
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2021-24654 User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
CVE-2023-7070 Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-3857 phpscriptpoint Ecommerce product.php cross site scripting
CVE-2025-1105 SiberianCMS HTTP GET Request flat cross site scripting
CVE-2024-40618
