Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-6210
HistoryMar 10, 2020 - 9:15 p.m.

Cross site scripting

2020-03-1021:15:00
PRIOn knowledge base
www.prio-n.com
6

0.001 Low

EPSS

Percentile

36.3%

SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, leading to reflected Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
fiori_launchpadeq754
fiori_launchpadeq753

0.001 Low

EPSS

Percentile

36.3%

Related for PRION:CVE-2020-6210