Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-35298
HistorySep 13, 2022 - 4:15 p.m.

Cross site scripting

2022-09-1316:15:00
PRIOn knowledge base
www.prio-n.com
1

0.001 Low

EPSS

Percentile

34.0%

SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. KMC servlet is vulnerable to XSS attack. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser session.

CPENameOperatorVersion
netweaver_enterprise_portaleq7.50

0.001 Low

EPSS

Percentile

34.0%

Related for PRION:CVE-2022-35298