SAP NetWeaver Enterprise Portal 7.20

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_enterprise_portal:7.20:*:*:*:*:*:*:*

part: a version: 7.20 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Enterprise Portal (3abfe406-8dc6-594c-a9f8-2adda4e02490)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-35225 vulnerable 2026-06-08 05:46:04.292924 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
Published: 2022-07-12T20:28:34.000Z
Updated: 2024-08-03T09:29:17.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35172 vulnerable 2026-06-08 05:46:04.244242 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Published: 2022-07-12T20:28:18.000Z
Updated: 2024-08-03T09:29:17.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35170 vulnerable 2026-06-08 05:46:04.238713 Details available
SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
Published: 2022-07-12T20:28:02.000Z
Updated: 2024-08-03T09:29:17.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32247 vulnerable 2026-06-08 05:44:43.074661 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Published: 2022-07-12T20:27:32.000Z
Updated: 2024-08-03T07:39:50.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26105 vulnerable 2026-06-08 05:41:50.541542 Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Published: 2022-04-12T16:11:22.000Z
Updated: 2024-08-03T04:56:37.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24395 vulnerable 2026-06-08 05:41:00.248929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33702 vulnerable 2026-06-08 05:32:12.188338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21489 vulnerable 2026-06-08 05:29:12.149234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2435 vulnerable 2026-06-08 05:11:37.137448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.