CVE-2020-6303

published 2020-01-14

CVE-2020-6303: SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	disclosure_management	< 10.1	10.1
sap_se	sap_disclosure_management	< 10.1	10.1

CWE-79