cbcvebase.
CVE-2020-6246
published 2020-06-10

CVE-2020-6246: SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not…

medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Affected

22 ranges
VendorProductVersion rangeFixed in
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sapnetweaver_as_abap_business_server_pages
sap_sesap_netweaver_as_abap< 700700
sap_sesap_netweaver_as_abap< 701701
sap_sesap_netweaver_as_abap< 702702
sap_sesap_netweaver_as_abap< 730730
sap_sesap_netweaver_as_abap< 731731
sap_sesap_netweaver_as_abap< 740740
sap_sesap_netweaver_as_abap< 750750
sap_sesap_netweaver_as_abap< 751751
sap_sesap_netweaver_as_abap< 752752
sap_sesap_netweaver_as_abap< 753753
sap_sesap_netweaver_as_abap< 754754