Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-6324 EUVD-2020-27474GHSA-c4pp-v922-7762

SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticat…

Published Sep 9, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s browser leading to Reflected Cross Site Scripting.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (BSP Test Application) < 700, < 701, < 702, < 730, < 731, < 740, < 750, < 751, < 752, < 753, < 754, < 755 —

References