SAP NetWeaver Enterprise Portal 7.40
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver_enterprise_portal:7.40:*:*:*:*:*:*:*
part: a version: 7.40 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver Enterprise Portal (3abfe406-8dc6-594c-a9f8-2adda4e02490) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35227 |
vulnerable | 2026-06-08 05:46:04.306965 |
Details available
A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site (XSS) scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to stealing or modifying of authentication information of the user, such as data relating to his or her current session.
Published: 2022-07-12T20:28:29.000Z
Updated: 2024-08-03T09:29:17.456Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35225 |
vulnerable | 2026-06-08 05:46:04.293148 |
Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
Published: 2022-07-12T20:28:34.000Z
Updated: 2024-08-03T09:29:17.442Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35172 |
vulnerable | 2026-06-08 05:46:04.244397 |
Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Published: 2022-07-12T20:28:18.000Z
Updated: 2024-08-03T09:29:17.458Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35170 |
vulnerable | 2026-06-08 05:46:04.240777 |
Details available
SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
Published: 2022-07-12T20:28:02.000Z
Updated: 2024-08-03T09:29:17.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32247 |
vulnerable | 2026-06-08 05:44:43.077090 |
Details available
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Published: 2022-07-12T20:27:32.000Z
Updated: 2024-08-03T07:39:50.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26105 |
vulnerable | 2026-06-08 05:41:50.543393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24397 |
vulnerable | 2026-06-08 05:41:00.253317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24395 |
vulnerable | 2026-06-08 05:41:00.250990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33703 |
vulnerable | 2026-06-08 05:32:12.192404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33702 |
vulnerable | 2026-06-08 05:32:12.190405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21489 |
vulnerable | 2026-06-08 05:29:12.151119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6323 |
vulnerable | 2026-06-08 05:26:45.134428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2435 |
vulnerable | 2026-06-08 05:11:37.139347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.