SAP NetWeaver Enterprise Portal Federated Portal Network Deserialization Vulnerability Allowing Content Injection

A vulnerability exists in SAP NetWeaver Enterprise Portal Federated Portal Network, where a privileged user can upload untrusted or malicious content. This content, upon deserialization, could potentially compromise the confidentiality, integrity, and availability of the host system.

Impact

Exploitation of this vulnerability could lead to a breach of the host system's confidentiality, integrity, and availability.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For detailed guidance on SAP Security Patch Days and Notes, refer to the SAP Security Notes FAQ.