Description (CNA)
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allow the attacker to track user information and deface parts of the rendered page, resulting in a low impact on confidentiality and integrity with no impact on availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP NetWeaver Enterprise Portal | affected EP-RUNTIME 7.50 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.