CVE-2022-35294CWE-79

CVE-2022-35294: fallo en SAP NetWeaver AS ABAP

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP NetWeaver AS ABAP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.5%
An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is then downloaded and viewed by other users resulting in a stored Cross-Site-Scripting attack. This could lead to information disclosure including stealing authentication information and impersonating the affected user.
Productos afectados
SAP SE · SAP NetWeaver AS ABAP
CVEs relacionadas — SAP NetWeaver AS ABAP

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-21446HIGHCVE-2021-21446EPSS 1.5%CVE-2020-26835MEDIUMCVE-2020-26835EPSS 0.8%CVE-2021-33663MEDIUMCVE-2021-33663EPSS 0.8%CVE-2021-44235—CVE-2021-44235EPSS 0.3%CVE-2021-27611HIGHCVE-2021-27611EPSS 0.3%