CVE-2020-6262

The CVE-2020-6262 entry concerns SAP Application Server ABAP (ST-PI) with vulnerable releases before 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740. The underlying issue is a code injection flaw in Service Data Download that could allow an attacker to inject and execute code with...

CVE-2020-6240

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

CVE-2020-6240

This CVE concerns SAP NetWeaver AS ABAP (Web Dynpro ABAP). The vulnerability allows an unauthenticated attacker to deny service to legitimate users by crashing or flooding the affected system. Affected components/versions identified across sources include SAP_UI 750, 752, 753, 754 and SAP_BASIS 7...

PT-2020-19057

Name of the Vulnerable Software and Affected Versions SAP Application Server ABAP ST-PI versions prior to 2008 1 46C SAP Application Server ABAP ST-PI versions prior to 2008 1 620 SAP Application Server ABAP ST-PI versions prior to 2008 1 640 SAP Application Server ABAP ST-PI versions prior to 20...

PT-2020-19036 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Web Dynpro ABAP versions SAP UI 750, 752, 753, 754 and SAP BASIS 700, 710, 730, 731, 804 Description: The issue allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing ...

CVE-2020-6240: Undefined Security Weakness

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

CVE-2020-6262: Improper Control of Generation of Code

Service Data Download in SAP Application Server ABAP ST-PI, before versions 2008146C, 20081620, 20081640, 20081700, 20081710, 740 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application and the whole ABAP system...

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

Cross site scripting

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages SBSPEXT_PHTMLB (versions 700–754, 730–731, etc.) is affected by a reflected Cross-Site Scripting (XSS) vulnerability due to insufficient encoding of user-controlled inputs in URL parameters. Root cause: improper input encoding in the SBSPEXT_PHTMLB test...

PT-2020-19012

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT PHTMLB versions 700 through 754 Description The issue is related to reflected Cross-Site Scripting XSS due to insufficient encoding of user-controlled inputs via different UR...

CVE-2020-6213: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

SAP NetWeaver AS ABAP Business Server Cross-Site Scripting Vulnerability (CNVD-2020-32898)

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB. The vulnerability stems from the WEB...

SAP NetWeaver AS ABAP Business Server Cross-Site Scripting Vulnerability

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages. The vulnerability stems from a lack of proper validation of client-side...

SAP NetWeaver AS ABAP Business Server Input Validation Error Vulnerability

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. An input validation error vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages Test Application IT00. The vulnerability stems from the network system...

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6215

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection...

CVE-2020-6215

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection...

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...