Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-26835 EUVD-2020-19371GHSA-q8g9-phwg-wqq9

SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input malicio…

Published Dec 9, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input malicious java script in the URL which could be executed in the browser resulting in Reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP < 740, < 750, < 751, < 752, < 753, < 754 —

References