Description
The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SAP SE | SAP Enable Now | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-38187 | The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: sap
Published:
Updated: 2024-08-03T09:36:43.435Z
Reserved: 2022-07-07T00:00:00.000Z
Link: CVE-2022-35297
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-10-11T21:15:13.367
Modified: 2024-11-21T07:11:04.287
Link: CVE-2022-35297
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses