2 matches found
CVE-2022-35227: Improper Neutralization of Input During Web Page Generation
A vulnerability in SAP NW EP WPC - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site XSS scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to...
6.1CVSS6.7AI score0.00727EPSS
SaveExploits0References2
PT-2022-4935
Name of the Vulnerable Software and Affected Versions SAP NW EP WPC versions 7.30 through 7.50 Description A vulnerability in SAP NW EP WPC does not sufficiently validate user-controlled input, allowing a remote attacker to conduct a Cross-Site XSS scripting attack. This could lead to the executi...
6.1CVSS0.00727EPSS
SaveExploits0References7
20