SAP SE SAP Netweaver Enterprise Portal (Kmc) vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP Netweaver Enterprise Portal (Kmc), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

MediumCVE-2022-35298sap_se · sap netweaver enterprise portal (kmc) +1 more4y agosap_se sap netweaver enterprise portal (kmc)SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. KMC servlet is vulnerable to XSS attack. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser session.EPSS0.54%MediumCVE-2024-47594sap_se · sap netweaver enterprise portal (kmc) +1 more2y agoCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick the user into clicking it. When a victim who is registered on the portal clicks on such link, confidentiality and integrity of their web browser session could be compromised.EPSS0.26%