Vulnerabilities > CVE-2021-33703 - Unspecified vulnerability in SAP Netweaver Enterprise Portal

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
sap
NVD
Published: 2021-08-10
Updated: 2024-11-21

Summary

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability.

Vulnerable Configurations

Part Description Count
Application
Sap
4

References