CVE-2022-35297: XSS

Published Oct 11, 2022

Updated

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability.

Affected Software

1 affected component

SAP Enable Now=10

Event History

Oct 11, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2022-35297.

What is the severity of CVE-2022-35297?

The severity of CVE-2022-35297 is medium with a CVSS score of 5.4.

Which software is affected by CVE-2022-35297?

The software affected by CVE-2022-35297 is SAP Enable Now version 10.

What is the impact of CVE-2022-35297?

CVE-2022-35297 allows for Stored Cross-Site Scripting (XSS) attacks, resulting in potential unauthorized access and manipulation of user data.

How can I fix CVE-2022-35297?

To fix CVE-2022-35297, it is recommended to apply the necessary security patches and updates provided by SAP.