ehir-vuln-enterprise-login

Enterprise Corporate Portal Local Setup This project contains a local containerized setup featuring a frontend portal and an integrated backend gateway. Workspace Structure client/: Contains the static frontend files index.html using Bootstrap 5 and the API connection handler. docker-compose.yml:...

CVE-2026-89122

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allo...

CVE-2026-89117

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal...

CVE-2026-89118

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application...

CVE-2026-89122

The SAP NetWeaver Enterprise Portal is vulnerable to an Open Redirect (CWE-601) because a specific portal component fails to sufficiently validate input. An unauthenticated attacker can craft a malicious link that, when clicked by a victim, loads content from an attacker-controlled site within th...

EUVD-2026-98201

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allo...

CVE-2026-89122 Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allo...

CVE-2026-89118

The SAP NetWeaver Enterprise Portal is affected by an information disclosure vulnerability. An unauthenticated attacker can access restricted resources to retrieve non-critical application information . This flaw results in a Low impact on Confidentiality , with no reported impact on the integrit...

EUVD-2026-98198

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application...

CVE-2026-89118 Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application...

EUVD-2026-98197

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal...

CVE-2026-89117 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal...

CVE-2026-89117

SAP NetWeaver Enterprise Portal is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79). An unauthenticated attacker can inject malicious scripts into a URL parameter , which are reflected in the server response and executed in a victim's browser upon visiting a crafted URL. This can lead to ...

CVE-2026-83070

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft component: Enterprise Portal. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...

CVE-2026-83070

CVE-2026-83070 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (component: Enterprise Portal ), specifically version 9.1 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all Interac...

EUVD-2026-79398

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft component: Enterprise Portal. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...

CVE-2026-83070: Improper Access Control

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft component: Enterprise Portal. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...

PT-2026-92594

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise PRTL Interaction Hub version 9.1 Description A flaw in the Enterprise Portal component allows a low-privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

SAP NetWeaver Enterprise Portal XSS (3746678)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a cross-site scripting vulnerability as referenced in SAP Security Note 3746678: - SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. T...

CVE-2026-44759

CVE-2026-44759 affects SAP NetWeaver Enterprise Portal. An unauthenticated attacker can inject malicious scripts into a URL parameter, with scripts reflected in server responses and executed in the user’s browser when the crafted URL is visited. This leads to theft of session information, manipul...