Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2020-6305

PI Rest Adapter of SAP Process Integration (update provided in SAP_XIAF 7.31, 7.40, 7.50) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

PI Rest Adapter of SAP Process Integration (update provided in SAP_XIAF 7.31, 7.40, 7.50) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP Process Integration - Rest Adapter (SAP_XIAF)

  • < 7.31affected
  • < 7.40affected
  • < 7.50affected

References