CVE-2022-29618CWE-79

CVE-2022-29618: fallo en SAP NetWeaver Development Infrastructure…

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP NetWeaver Development Infrastructure

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 1.2%
Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to inject script into the URL and execute code in the user’s browser. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Productos afectados
SAP SE · SAP NetWeaver Development Infrastructure (Design Time Repository)