Vulnetix
Try Vulnetix Request Demo
CVE-2022-39799 PUBLISHED CVSS 6.099999904632568 MEDIUM

An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.

EPSS 0.46% · 64.1th percentile

Risk Scores

CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.46%
64.1th percentile

Affected Products

VendorProductVersions
SAP SESAP NetWeaver AS ABAP (SAP GUI for HTML within the Fiori Launchpad)KERNEL 7.77, 7.81, 7.85
sapnetweaver_application_server_abap7.54, 7.81, 7.85

Timeline

References

Open in Interactive Console →