Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2020-6323

UNKNOWN
Published 2020-10-15T01:45:27
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2020-6323. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-controlled inputs and allows an attacker on a valid session to create an XSS that will be both reflected immediately and also be persisted and returned in further access to the system, resulting in Cross Site Scripting.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

SAP SE

SAP NetWeaver Enterprise Portal (Fiori Framework Page)

Affected Versions:

< 7.50 < 7.31 < 7.40

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-p38h-pwx6-7hwx

Advisory Details

SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-controlled inputs and allows an attacker on a valid session to create an XSS that will be both reflected immediately and also be persisted and returned in further access to the system, resulting in Cross Site Scripting.

CVSS Scoring

CVSS Score

5.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-6323
WEB https://launchpad.support.sap.com/#/notes/2960329
WEB https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: May 24, 2022

References

https://launchpad.support.sap.com/#/notes/2960329
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196
Published: 2020-10-15T01:45:27
Last Modified: 2024-08-04T08:55:22.480Z
Copied to clipboard!