CVE-2020-6260

SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed by the application, due to Incomplete XML Validation. The application shows additional data that do not actually exist.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cna@sap.com

Published

2020-06-10

Last modified

2024-08-04

Weaknesses

CWE-91

Affected products

• Solution Manager (Sap)
• Sap Solution Manager Trace Analysis (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2915126
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775