SAP SE SAP NetWeaver Enterprise Portal
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-35225 | 7.10 ; 7.11 ; 7.20 ; … | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs ove | MEDIUM 6.1 | 0.6 % | ||
| CVE-2022-35172 | 7.10 ; 7.11 ; 7.20 ; … | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, re | MEDIUM 6.1 | 0.6 % | ||
| CVE-2022-35170 | 7.10 ; 7.11 ; 7.20 ; … | SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs ove | MEDIUM 6.1 | 0.6 % | ||
| CVE-2022-32247 | 7.10 ; 7.11 ; 7.20 ; … | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthe | MEDIUM 6.1 | 0.9 % | ||
| CVE-2022-26105 | 7.10 ; 7.11 ; 7.20 ; … | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthe | MEDIUM 6.1 | 0.9 % | ||
| CVE-2022-24397 | < 7.30 ; < 7.31 ; < 7.40 ; … | SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflect | MEDIUM 6.1 | 0.8 % | ||
| CVE-2022-24395 | < 7.10 ; < 7.11 ; < 7.20 ; … | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, re | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-33705 | < 7.10 ; < 7.11 ; < 7.20 ; … | The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forger | HIGH 8.1 | 2.1 % | ||
| CVE-2021-21489 | < 7.10 ; < 7.11 ; < 7.20 ; … | SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulti | MEDIUM 4.8 | 0.6 % | ||
| CVE-2021-33702 | < 7.10 ; < 7.11 ; < 7.20 ; … | Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode rep | HIGH 8.3 | 1.5 % |