| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver enterprise portal | = 7.10= 7.11= 7.20= 7.30= 7.31= 7.40= 7.50 |
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free