Medium severity6.1NVD Advisory· Published Mar 1, 2018· Updated Jun 17, 2026
CVE-2018-2365
CVE-2018-2365
Description
SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:sap:netweaver_portal:7.30:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:sap:netweaver_portal:7.30:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_portal:7.31:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_portal:7.40:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_portal:7.50:*:*:*:*:*:*:*
- (no CPE)range: 7.30, 7.31, 7.40, 7.50
- SAP SE/SAP NetWeaver Portal WebDynpro RunTimev5Range: 7.30
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/102999nvdThird Party AdvisoryVDB Entry
- blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/nvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.