medium2026-10-13SAP NetWeaver Enterprise Portal — EP-ADMINCVE-2026-89117
Reflected XSS in Enterprise Portal Administration
SAP Enterprise Portal
Our Take
XSS in an admin console is more interesting than it sounds, since the victim is usually someone powerful. Still a click-required issue.
Vulnerability Detail
Reflected cross-site scripting in the portal administration component.
Patch Action
Apply SAP Note 3779985 alongside the other Enterprise Portal notes.
Affected Versions
EP-ADMIN 7.50
Patch Info