Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-6217 EUVD-2020-27367GHSA-xrfg-5m62-c7c7

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not…

Published Apr 14, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver AS ABAP (Business Server Pages Test Application IT05)

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Business Server Pages Test Application IT05) < 700, < 701, < 702, < 730, < 731, < 740, < 750, < 751, < 752, < 753, < 754 —

References