PT-2022-22696 · Sap · Sap Enable Now

Name of the Vulnerable Software and Affected Versions: SAP Enable Now affected versions not specified Description: The issue arises from insufficient encoding of user-controlled inputs over the network, which are then placed in the output served to other users. This leads to a Stored Cross-Site...

CVE-2022-35224

SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. This attack can be used to non-permanently deface or modify portal content. The execution of script content by a...

PT-2022-4081

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal versions 7.10 through 7.50 Description The issue is related to the failure to protect the web page structure, allowing a remote attacker to conduct cross-site scripting attacks. The vulnerability is caused by...

CVE-2022-22534

Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the...

PT-2021-20271

Name of the Vulnerable Software and Affected Versions: SAP Cloud Connector version 2.0 Description: The issue arises from insufficient encoding of user-controlled inputs, allowing an attacker with Administrator rights to include malicious codes that get stored in the database. When accessed, thes...

PT-2021-14555

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Description The issue arises from insufficient encoding of user-related data, resulting in a Stored Cross-Site Scripting XSS vulnerability. This allows an attack...

PT-2021-20268

Name of the Vulnerable Software and Affected Versions: NWDI Notification Service versions 7.31, 7.40, 7.50 Description: The issue arises from insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability. This allows a threat actor to send crafted scripts ...

PT-2021-20243

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP Applications based on SAP GUI for HTML versions 7.49 through 7.84 Description: The issue arises from insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. This...

PT-2021-20242

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP versions SAP UI - 750, 752, 753, 754, 755, SAP BASIS - 702, 731 Description: The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. This...

PT-2020-19143

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Design Time Repository DTR versions 7.11, 7.30, 7.31, 7.40, 7.50 Description The issue results from insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS problem. Recommendations For versions 7.11...

PT-2020-19075

Name of the Vulnerable Software and Affected Versions SAP Fiori Launchpad affected versions not specified Description The issue arises from insufficient encoding of user-controlled inputs, allowing an attacker to inject meta tags into the launchpad HTML using a vulnerable parameter. This results ...

PT-2020-19073

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform BI Launchpad version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in reflected Cross-Site Scripting. This allows attackers to inject...

PT-2020-19042

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT TABLE versions 700 through 754 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a reflected Cross-Site Scripting XSS...

CVE-2020-6257

SAP Business Objects Business Intelligence Platform CMC and BI Launchpad 4.2 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability...

CVE-2020-6254

SAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response pages in case of errors, allowing XSS payload reflecting in the response, leading to reflected Cross Site Scripting...

PT-2020-19012

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT PHTMLB versions 700 through 754 Description The issue is related to reflected Cross-Site Scripting XSS due to insufficient encoding of user-controlled inputs via different UR...

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

PT-2020-19027

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP versions 700 through 75E Description The issue arises from insufficient encoding of user-controlled inputs in the Business Server Pages application CRM BSP FRAME, resulting in a reflected Cross-Site Scripting XSS issue...

PT-2020-19029

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. This allows for...

PT-2020-19024

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability. This...