CVE-2022-41266

Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2205, allows malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a DOM Cross-Site Scripting (XSS) attack. As a result, an attacker may be able to steal user tokens and achieve a full account takeover including access to administrative tools in SAP Commerce.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.6 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://launchpad.support.sap.com/#/notes/3248255	Permissions Required Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html	Vendor Advisory
https://launchpad.support.sap.com/#/notes/3248255	Permissions Required Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sap:commerce_webservices_2.0:1905:::::::*
	cpe:2.3:a:sap:commerce_webservices_2.0:2005:::::::*
	cpe:2.3:a:sap:commerce_webservices_2.0:2011:::::::*
	cpe:2.3:a:sap:commerce_webservices_2.0:2105:::::::*
	cpe:2.3:a:sap:commerce_webservices_2.0:2205:::::::*

History

21 Nov 2024, 07:22

Type	Values Removed	Values Added
References	~~() https://launchpad.support.sap.com/#/notes/3248255 - Permissions Required, Vendor Advisory~~	() https://launchpad.support.sap.com/#/notes/3248255 - Permissions Required, Vendor Advisory
References	~~() https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory~~	() https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~6.1~~	v2 : unknown v3 : 8.0

15 Dec 2022, 15:52

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-12-13 03:15

Updated : 2024-11-21 07:22

NVD link : CVE-2022-41266

Mitre link : CVE-2022-41266

CVE.ORG link : CVE-2022-41266

JSON object : View

Products Affected

sap

commerce_webservices_2.0

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2022-41266", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2022-12-13T03:15:09.507", "references": [{"url": "https://launchpad.support.sap.com/#/notes/3248255", "tags": ["Permissions Required", "Vendor Advisory"], "source": "cna@sap.com"}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}, {"url": "https://launchpad.support.sap.com/#/notes/3248255", "tags": ["Permissions Required", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2205, allows malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a DOM Cross-Site Scripting (XSS) attack. \u00a0As a result, an attacker may be able to steal user tokens and achieve a full account takeover including access to administrative tools in SAP Commerce."}, {"lang": "es", "value": "Debido a la falta de una validaci\u00f3n de entrada adecuada, SAP Commerce Webservices 2.0 (Swagger UI): versiones 1905, 2005, 2105, 2011, 2205, permite entradas maliciosas de fuentes no confiables, que un atacante puede aprovechar para ejecutar un ataque de cross site scripting DOM (XSS). Como resultado, un atacante puede robar tokens de usuario y lograr el control total de la cuenta, incluido el acceso a herramientas administrativas en SAP Commerce."}], "lastModified": "2024-11-21T07:22:56.740", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:commerce_webservices_2.0:1905:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91CCD1DB-79F7-4A2F-88F6-3455118E14C9"}, {"criteria": "cpe:2.3:a:sap:commerce_webservices_2.0:2005:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "124471DF-DDA0-4A73-8224-10D2F0BD6CCF"}, {"criteria": "cpe:2.3:a:sap:commerce_webservices_2.0:2011:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63B2356C-28B7-4EAF-BC5C-C13F0F6A76B6"}, {"criteria": "cpe:2.3:a:sap:commerce_webservices_2.0:2105:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5938B02B-2282-4925-90AE-7FAE0C19E4B2"}, {"criteria": "cpe:2.3:a:sap:commerce_webservices_2.0:2205:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D42EE48-9073-4507-AC40-D9B8A926D6DB"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}