Description (CNA)
Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver (ABAP and Java application Servers) | affected 700; affected 701; affected 702; affected 731; affected 740; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756 |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/3124994
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.