Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-6229 EUVD-2020-27379GHSA-p9pq-9vfw-wcq6

SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75…

Published Apr 14, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME)

Description

SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME) < 700, < 701, < 702, < 710, < 711, < 730, < 731, < 740, < 750, < 751, < 752, < 75A, < 75B, < 75C, < 75D, < 75E —

References