Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-6213 EUVD-2020-27363GHSA-3cxp-7r2h-jh9g

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754…

Published Apr 24, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver AS ABAP (Business Server Pages Test Application SBSPEXT_PHTMLB)

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting (XSS) via different URL parameters as it does not sufficiently encode user controlled inputs.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Business Server Pages Test Application SBSPEXT_PHTMLB) < 700, < 701, < 702, < 730, < 731, < 740, < 750, < 751, < 752, < 753, < 754 —

References