CVE-2022-28217CWE-918

Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary…

published June 13, 2022

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary to exploit unprotected XML parking at endpoints, and a possibility to conduct SSRF attacks that could compromise system�s Availability by causing system to crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00759 · 54.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2022-06-13T16:04Z
EPSS history
Timeline
  • 13 JUN 16:04Z
    Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary…
    cvelistv5