Netweaver Portal (Sap) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2021-09-15. Vendor: Sap.

CVEs of Netweaver Portal

• CVE-2021-33705 - CVSS 8.1 (high), 2021-09-15: The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forgery (SSRF)…
• CVE-2018-2365 - CVSS 6.1 (medium), 2018-03-01: SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS)…
• CVE-2017-11460 - CVSS 6.1 (medium), 2017-07-25: Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web…