What is the severity of CVE-2022-29618?

CVE-2022-29618 is considered a high severity vulnerability due to its potential for code injection and execution in user browsers.

How do I fix CVE-2022-29618?

To remediate CVE-2022-29618, update SAP NetWeaver Development Infrastructure to the latest patched version provided by SAP.

What systems are affected by CVE-2022-29618?

CVE-2022-29618 affects SAP NetWeaver Development Infrastructure versions 7.30, 7.31, 7.40, and 7.50.

What type of attack is enabled by CVE-2022-29618?

CVE-2022-29618 enables unauthenticated attackers to perform cross-site scripting (XSS) attacks through script injection.

Who can exploit CVE-2022-29618?

CVE-2022-29618 can be exploited by unauthenticated attackers, making it particularly dangerous for exposed systems.

Vulnerability/
CVE-2022-29618

medium

6.1

CWE

79 20

14/6/2022

3/8/2024

CVE-2022-29618: XSS

First published: Tue Jun 14 2022(Updated: )

Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to inject script into the URL and execute code in the user’s browser. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.

Credit: cna@sap.com

Affected Software	Affected Version	How to fix
SAP NetWeaver Development Infrastructure	=7.30
SAP NetWeaver Development Infrastructure	=7.31
SAP NetWeaver Development Infrastructure	=7.40
SAP NetWeaver Development Infrastructure	=7.50

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-29618?
CVE-2022-29618 is considered a high severity vulnerability due to its potential for code injection and execution in user browsers.
How do I fix CVE-2022-29618?
To remediate CVE-2022-29618, update SAP NetWeaver Development Infrastructure to the latest patched version provided by SAP.
What systems are affected by CVE-2022-29618?
CVE-2022-29618 affects SAP NetWeaver Development Infrastructure versions 7.30, 7.31, 7.40, and 7.50.
What type of attack is enabled by CVE-2022-29618?
CVE-2022-29618 enables unauthenticated attackers to perform cross-site scripting (XSS) attacks through script injection.
Who can exploit CVE-2022-29618?
CVE-2022-29618 can be exploited by unauthenticated attackers, making it particularly dangerous for exposed systems.

collector/nvd-index
agent/weakness
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/author
agent/tags
agent/event
agent/description
agent/first-publish-date
agent/source
vendor/sap
canonical/sap netweaver development infrastructure
version/sap netweaver development infrastructure/7.30
version/sap netweaver development infrastructure/7.31
version/sap netweaver development infrastructure/7.40
version/sap netweaver development infrastructure/7.50

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2022-29618?
CVE-2022-29618 is considered a high severity vulnerability due to its potential for code injection and execution in user browsers.
How do I fix CVE-2022-29618?
To remediate CVE-2022-29618, update SAP NetWeaver Development Infrastructure to the latest patched version provided by SAP.
What systems are affected by CVE-2022-29618?
CVE-2022-29618 affects SAP NetWeaver Development Infrastructure versions 7.30, 7.31, 7.40, and 7.50.
What type of attack is enabled by CVE-2022-29618?
CVE-2022-29618 enables unauthenticated attackers to perform cross-site scripting (XSS) attacks through script injection.
Who can exploit CVE-2022-29618?
CVE-2022-29618 can be exploited by unauthenticated attackers, making it particularly dangerous for exposed systems.