CVE-2020-6213
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting (XSS) via different URL parameters as it does not sufficiently encode user controlled inputs.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cna@sap.com
- Published
- 2020-04-24
- Last modified
- 2024-08-04
- Weaknesses
- CWE-79
Affected products
- Netweaver As Abap Business Server Pages (Sap)
- Sap Netweaver As Abap Business Server Pages Test Application Sbspext Phtmlb (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2872752
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
