CVE-2020-6185 vulnerability in SAP Products
Published on February 12, 2020
Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability.
Products Associated with CVE-2020-6185
stack.watch emails you whenever new vulnerabilities are published in SAP NetWeaver or SAP S4hana. Just hit a watch button to start following.
Affected Versions
SAP SE SAP NetWeaver (SAP Basis):- Version = 7.40 is affected.
- Version = 7.50 is affected.
- Version = 7.51 is affected.
- Version = 7.52 is affected.
- Version = 7.53 is affected.
- Version = 7.54 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.