Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2018-2435
Analyzed
More InfoOfficial Page
Source-cna@sap.com
View Known Exploited Vulnerability (KEV) details
Published At-10 Jul, 2018 | 18:29
Updated At-05 Sep, 2018 | 16:33

SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.06.1MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches

SAP SE
sap
>>netweaver_enterprise_portal>>Versions from 7.0(inclusive) to 7.02(inclusive)
cpe:2.3:a:sap:netweaver_enterprise_portal:*:*:*:*:*:*:*:*
SAP SE
sap
>>netweaver_enterprise_portal>>7.11
cpe:2.3:a:sap:netweaver_enterprise_portal:7.11:*:*:*:*:*:*:*
SAP SE
sap
>>netweaver_enterprise_portal>>7.20
cpe:2.3:a:sap:netweaver_enterprise_portal:7.20:*:*:*:*:*:*:*
SAP SE
sap
>>netweaver_enterprise_portal>>7.30
cpe:2.3:a:sap:netweaver_enterprise_portal:7.30:*:*:*:*:*:*:*
SAP SE
sap
>>netweaver_enterprise_portal>>7.31
cpe:2.3:a:sap:netweaver_enterprise_portal:7.31:*:*:*:*:*:*:*
SAP SE
sap
>>netweaver_enterprise_portal>>7.40
cpe:2.3:a:sap:netweaver_enterprise_portal:7.40:*:*:*:*:*:*:*
SAP SE
sap
>>netweaver_enterprise_portal>>7.50
cpe:2.3:a:sap:netweaver_enterprise_portal:7.50:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
http://www.securityfocus.com/bid/104706cna@sap.com
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2643126cna@sap.com
Vendor Advisory
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000cna@sap.com
Vendor Advisory
Change History
0Changes found

Details not found