SAP NetWeaver Enterprise Portal Cross-Site Scripting Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in SAP NetWeaver Enterprise Portal. This vulnerability allows an unauthenticated attacker to inject malicious scripts that execute in the context of other users' browsers. Consequently, the attacker could steal session cookies, tokens, and other sensitive information. The vulnerability affects several different versions and/or ranges.

Impact

Exploitation of this vulnerability could lead to Cross-Site Scripting, allowing for the injection of malicious scripts that could be executed in the context of other users' browsers.

Remediation

Security fixes for SAP NetWeaver based products are delivered with the support packages. For information on the latest security patches, refer to the SAP Security Patch Day Notes.