CVE-2022-35298: XSS
SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. KMC servlet is vulnerable to XSS attack. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-35298?
CVE-2022-35298 is classified as a medium severity Cross-Site Scripting vulnerability.
How do I fix CVE-2022-35298?
To mitigate CVE-2022-35298, ensure you are using the latest patched version of SAP NetWeaver Enterprise Portal.
What versions of SAP NetWeaver are affected by CVE-2022-35298?
CVE-2022-35298 specifically affects SAP NetWeaver Enterprise Portal version 7.50.
What type of attack is CVE-2022-35298 associated with?
CVE-2022-35298 is associated with Cross-Site Scripting (XSS) attacks.
What could be the consequences of exploiting CVE-2022-35298?
Exploitation of CVE-2022-35298 may allow an attacker to execute malicious scripts in the context of a victim's session.