CVE-2022-39799

Published: Sep 13, 2022Modified: Jun 10, 2025

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.

Affected (5)

Products: Sap: Netweaver Application Server Abap

Sap

1 product

Netweaver Application Server Abap

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Application Server Abap	Version 7.54
Sap Netweaver Application Server Abap	Version 7.81
Sap Netweaver Application Server Abap	Version 7.85
Sap Netweaver Application Server Abap	Version 7.89
Sap Netweaver Application Server Abap	Version kernel_7.77