Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-6246 EUVD-2020-27396GHSA-2jgc-5rvf-93wc

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754,…

Published Jun 10, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver AS ABAP (Business Server Pages Test Application SBSPEXT_TABLE)

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Business Server Pages Test Application SBSPEXT_TABLE) < 700, < 701, < 702, < 730, < 731, < 740, < 750, < 751, < 752, < 753, < 754 —

References