SAP NetWeaver Enterprise Portal 7.11

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_enterprise_portal:7.11:*:*:*:*:*:*:*

part: a version: 7.11 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Enterprise Portal (3abfe406-8dc6-594c-a9f8-2adda4e02490)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-35225 vulnerable 2026-06-08 05:46:04.292902 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
Published: 2022-07-12T20:28:34.000Z
Updated: 2024-08-03T09:29:17.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35172 vulnerable 2026-06-08 05:46:04.244105 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Published: 2022-07-12T20:28:18.000Z
Updated: 2024-08-03T09:29:17.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35170 vulnerable 2026-06-08 05:46:04.238116 Details available
SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
Published: 2022-07-12T20:28:02.000Z
Updated: 2024-08-03T09:29:17.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32247 vulnerable 2026-06-08 05:44:43.073865 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Published: 2022-07-12T20:27:32.000Z
Updated: 2024-08-03T07:39:50.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26105 vulnerable 2026-06-08 05:41:50.540897 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Published: 2022-04-12T16:11:22.000Z
Updated: 2024-08-03T04:56:37.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24395 vulnerable 2026-06-08 05:41:00.248334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33702 vulnerable 2026-06-08 05:32:12.187758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21489 vulnerable 2026-06-08 05:29:12.148665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2435 vulnerable 2026-06-08 05:11:37.136900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.