SAP NetWeaver Enterprise Portal Cross-Site Scripting Vulnerability (CNVD-2022-56956)

SAP NetWeaver Enterprise Portal is a Web front-end component of SAP NetWeaver from SAP Germany.SAP NetWeaver Enterprise Portal versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 versions have a cross-site scripting vulnerability that stems from a failure to adequately encode user input via web control, resulting in a reflective cross-site scripting (XSS) vulnerability that changes the scope of the attack, which has implications for data integrity. No detailed vulnerability details are currently available.