[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwT3LSFeNZoZNJtSe2NHMVgD0aq4uE_L5YxqlGB6PkeQ":3,"g5a-ex:sap\u002Fnetweaver_enterprise_portal@*":125,"g5a-family:sap\u002Fnetweaver_enterprise_portal":127},{"success":4,"data":5},true,{"product":6,"versions":39,"topVulnerabilitiesByEpss":49,"kevVulnerabilities":102,"seoMetadata":103,"meta":122},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":38},"sap","netweaver_enterprise_portal",9,20,0,"2024-10-08",[14,17,19,22,24,26,29,32,35],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"7.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"7.02",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"7.10",8,{"version":23,"cve_count":9,"kev_count":11,"has_kev":16},"7.11",{"version":25,"cve_count":9,"kev_count":11,"has_kev":16},"7.20",{"version":27,"cve_count":28,"kev_count":11,"has_kev":16},"7.30",12,{"version":30,"cve_count":31,"kev_count":11,"has_kev":16},"7.31",15,{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},"7.40",13,{"version":36,"cve_count":37,"kev_count":11,"has_kev":16},"7.50",18,"Netweaver Enterprise Portal by Sap is a technology product with 9 tracked versions and 20 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[40,41,42,43,44,45,46,47,48],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":9,"kev_count":11,"has_kev":16},{"version":25,"cve_count":9,"kev_count":11,"has_kev":16},{"version":27,"cve_count":28,"kev_count":11,"has_kev":16},{"version":30,"cve_count":31,"kev_count":11,"has_kev":16},{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},{"version":36,"cve_count":37,"kev_count":11,"has_kev":16},[50,58,62,69,72,78,83,88,93,97],{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":57},"CVE-2015-2812","XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966.","2015-04-01",5,"v2","Medium",0.02485,{"cveId":59,"description":60,"publishedDate":53,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":61},"CVE-2015-2811","XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939.",0.0238,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":56,"isKev":16,"epssScore":68},"CVE-2021-33703","Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability.","2021-08-10",6.1,"v3.1",0.01482,{"cveId":70,"description":71,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":56,"isKev":16,"epssScore":68},"CVE-2021-33702","Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malicious script gets executed in the victim's browser, resulting in a Stored Cross-Site Scripting (XSS) vulnerability.",{"cveId":73,"description":74,"publishedDate":75,"cvssScore":66,"cvssVersion":76,"severity":56,"isKev":16,"epssScore":77},"CVE-2018-2435","SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.","2018-07-10","v3.0",0.01325,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":66,"cvssVersion":67,"severity":56,"isKev":16,"epssScore":82},"CVE-2022-26105","SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.","2022-04-12",0.0091,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":66,"cvssVersion":67,"severity":56,"isKev":16,"epssScore":87},"CVE-2022-32247","SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.","2022-07-12",0.00855,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":66,"cvssVersion":67,"severity":56,"isKev":16,"epssScore":92},"CVE-2022-24397","SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.This reflected cross-site scripting attack can be used to non-permanently deface or modify displayed content of portal Website. The execution of the script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser.","2022-03-10",0.00835,{"cveId":94,"description":95,"publishedDate":86,"cvssScore":66,"cvssVersion":67,"severity":56,"isKev":16,"epssScore":96},"CVE-2022-35227","A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site (XSS) scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to stealing or modifying of authentication information of the user, such as data relating to his or her current session.",0.00727,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":66,"cvssVersion":67,"severity":56,"isKev":16,"epssScore":101},"CVE-2020-6323","SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-controlled inputs and allows an attacker on a valid session to create an XSS that will be both reflected immediately and also be persisted and returned in further access to the system, resulting in Cross Site Scripting.","2020-10-15",0.00648,[],{"title":104,"metaDescription":105,"keywords":106,"structuredData":107},"Netweaver Enterprise Portal by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Netweaver Enterprise Portal by Sap covering 9 versions with 20 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netweaver Enterprise Portal vulnerabilities, Netweaver Enterprise Portal security, Netweaver Enterprise Portal CVE, Sap Netweaver Enterprise Portal, Netweaver Enterprise Portal threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":108,"@type":109,"name":110,"description":105,"url":111,"manufacturer":112,"applicationCategory":116,"softwareVersion":117,"mainEntity":118},"https:\u002F\u002Fschema.org","SoftwareApplication","Netweaver Enterprise Portal","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fnetweaver_enterprise_portal",{"@type":113,"name":114,"url":115},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","9 versions tracked",{"@type":119,"name":120,"description":121,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Netweaver Enterprise Portal Security Vulnerabilities","Security vulnerabilities affecting Netweaver Enterprise Portal by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":123,"apiVersion":124},"2026-10-18T21:15:36.067Z","3.0",{"rows":126,"total":11,"capped":16,"failed":11},[],[]]