Riskcovery

CVE-2020-6323

State
Published
Severity
Not scored
Published
Oct 15, 2020
Updated
Aug 4, 2024
Reserved
Jan 8, 2020

Read the record on cve.org

Description

SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-controlled inputs and allows an attacker on a valid session to create an XSS that will be both reflected immediately and also be persisted and returned in further access to the system, resulting in Cross Site Scripting.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP NetWeaver Enterprise Portal (Fiori Framework Page)SAP SE
  • < 7.50Affected
  • < 7.31Affected
  • < 7.40Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.