Script Execution Vulnerability in SAP NetWeaver Enterprise Portal

CVE-2022-32247

What is CVE-2022-32247?

SAP NetWeaver Enterprise Portal, encompassing versions 7.10 to 7.50, has a vulnerability that allows unauthenticated attackers to execute scripts due to inadequate sanitization of user inputs during network interactions. This exploitation could lead to unauthorized access, enabling an attacker to view or modify sensitive information, thus posing a risk to the application’s confidentiality and integrity.

References