CVE-2018-2435: XSS
SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2435?
CVE-2018-2435 has a medium severity rating due to its potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2018-2435?
To fix CVE-2018-2435, ensure that you apply the latest security patches provided by SAP for all affected versions of the SAP NetWeaver Enterprise Portal.
What versions of SAP NetWeaver Enterprise Portal are affected by CVE-2018-2435?
CVE-2018-2435 affects SAP NetWeaver Enterprise Portal versions from 7.0 to 7.50.
What are the risks associated with CVE-2018-2435?
The primary risk associated with CVE-2018-2435 is that an attacker could exploit the XSS vulnerability to execute malicious scripts in the context of a user's session.
Is user input a factor in CVE-2018-2435?
Yes, CVE-2018-2435 stems from insufficient encoding of user-controlled inputs in the SAP NetWeaver Enterprise Portal.