CVE-2020-6324

 

Published at: - 09-09-2020 04:15

Last modified: - 30-01-2023 07:24

Total changes: - 11

Description

SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim?s browser leading to Reflected Cross Site Scripting.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

 

Verification logic

 

Reference

• https://launchpad.support.sap.com/#/notes/2948239
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700

 

Keywords

NVD

 

CVE-2020-6324

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures