CVE-2022-35298CWE-79

CVE-2022-35298: vulnerability in SAP NetWeaver Enterprise Portal (KMC)

Published · Updated

Follow this CVE+ Monitor SAP NetWeaver Enterprise Portal

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. KMC servlet is vulnerable to XSS attack. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser session.
Affected products
SAP SE · SAP NetWeaver Enterprise Portal (KMC)