Sap Netweaver Portal — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Netweaver Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-33705 — CVSS 8.1 (high): The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request…
• CVE-2017-11460 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject…
• CVE-2018-2365 — CVSS 6.1 (medium): SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site…