CVE-2022-35224

Summary of CVE-2022-35224 (SAP Enterprise Portal) : A cross-site scripting (XSS) vulnerability in SAP Enterprise Portal versions 7.10–7.50 arises from insufficient encoding of user-controlled inputs, enabling attackers to non-permanently deface or modify portal content. If a victim browses with a...

CVE-2017-10701

CVE-2017-10701 affects SAP Enterprise Portal 7.50 with a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML, as referenced by SAP Security Notes 2469860, 2471209, and 2488516. The connected documents explicitly identify the product and vul...

CVE-2013-7365

The CVE-2013-7365 entry concerns SAP Enterprise Portal with a Cross-site Scripting (XSS) vulnerability. The root cause identified in the records is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the portal. The available documents do ...

CVE-2013-7367

CVE-2013-7367 affects SAP Enterprise Portal. The issue involves improper restriction of access to Federation configuration pages, enabling remote attackers to gain privileges via unspecified vectors. The description across multiple sources (NVD/Red Hat/CVE lists) consistently cites elevated privi...