CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2022-29610

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data, which could result in Stored Cross-Site Scripting (XSS) attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.7%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

https://launchpad.support.sap.com/#/notes/3146336
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
https://launchpad.support.sap.com/#/notes/3146336
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Products affected by CVE-2022-29610

Sap » Netweaver Application Server Abap » Version: 753

cpe:2.3:a:sap:netweaver_application_server_abap:753
Sap » Netweaver Application Server Abap » Version: 754

cpe:2.3:a:sap:netweaver_application_server_abap:754
Sap » Netweaver Application Server Abap » Version: 755

cpe:2.3:a:sap:netweaver_application_server_abap:755
Sap » Netweaver Application Server Abap » Version: 756

cpe:2.3:a:sap:netweaver_application_server_abap:756

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-29610

Products

Pricing

Contact Us