Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2020-6324

SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the v

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s browser leading to Reflected Cross Site Scripting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver AS ABAP (BSP Test Application)

  • < 700affected
  • < 701affected
  • < 702affected
  • < 730affected
  • < 731affected
  • < 740affected
  • < 750affected
  • < 751affected
  • < 752affected
  • < 753affected
  • < 754affected
  • < 755affected

References