CVE-2020-6184 vulnerability in SAP Products
Published on February 12, 2020
Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability.
Products Associated with CVE-2020-6184
stack.watch emails you whenever new vulnerabilities are published in SAP NetWeaver or SAP S4hana. Just hit a watch button to start following.
Affected Versions
SAP SE Automated Note Search Tool (SAP Basis):- Version < 7.0 is affected.
- Version < 7.01 is affected.
- Version < 7.02 is affected.
- Version < 7.31 is affected.
- Version < 7.4 is affected.
- Version < 7.5 is affected.
- Version < 7.51 is affected.
- Version < 7.52 is affected.
- Version < 7.53 is affected.
- Version < 7.54 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.