Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-6185 EUVD-2020-27335GHSA-hv2v-5wv6-cwqf

Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.…

Published Feb 12, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver (SAP Basis) = 7.40 —
SAP SE SAP S/4HANA (SAP Basis) = 7.50, = 7.51, = 7.52, = 7.53, = 7.54 —

References