CVE-2020-6184

Under certain conditions, ABAP Online Community in SAP NetWeaver SAPBASIS version 7.40 and SAP S/4HANA SAPBASIS versions 7.50, 7.51, 7.52, 7.53, 7.54, does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6190

Certain vulnerable endpoints in SAP NetWeaver AS Java Heap Dump Application, versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure...

CVE-2020-6190

CVE-2020-6190 affects SAP NetWeaver AS Java (Heap Dump Application). Vulnerable endpoints in versions 7.30, 7.31, 7.40, 7.50 can disclose system information such as hostname, server node, and installation path. The underlying impact is information disclosure. The provided documents describe the a...

CVE-2020-6187

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

CVE-2020-6187

SAP NetWeaver (Guided Procedures) is affected in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 by a vulnerability where XML input from a compromised admin is not sufficiently validated, enabling Denial of Service. The CVE entry documents the root cause as inadequate validation of XML docu...

CVE-2020-6193

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6193

The CVE-2020-6193 entry concerns SAP NetWeaver Knowledge Management ICE Service. Affected products/versions are SAP NetWeaver Knowledge Management ICE Service from 7.30, 7.31, 7.40, 7.50. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability exploitable by an unauthenticated attacker....

PT-2020-18987

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.40 SAP S/4HANA versions 7.50 through 7.54 Description The issue arises from insufficient encoding of user-controlled inputs, leading to a Reflected Cross-Site Scripting XSS vulnerability. This occurs under certain...

CVE-2020-6190: Exposure of Sensitive Information to an Unauthorized Actor

Certain vulnerable endpoints in SAP NetWeaver AS Java Heap Dump Application, versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure...

PT-2020-18993

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java Heap Dump Application versions 7.30, 7.31, 7.40, 7.50 Description The issue allows attackers to gain valuable information about the system, including hostname, server node, and installation path, through certain vulnerabl...

CVE-2020-6187: Improper Restriction of XML External Entity Reference

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

CVE-2020-6193: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6181: Undefined Security Weakness

Under some circumstances the SAML SSO implementation in the SAP NetWeaver SAPBASIS versions 702, 730, 731, 740 and SAP ABAP Platform SAPBASIS versions 750, 751, 752, 753, 754, allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response...

CVE-2020-6184: Improper Neutralization of Input During Web Page Generation

Under certain conditions, ABAP Online Community in SAP NetWeaver SAPBASIS version 7.40 and SAP S/4HANA SAPBASIS versions 7.50, 7.51, 7.52, 7.53, 7.54, does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting XSS vulnerability...

PT-2020-18988

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.40 SAP S/4HANA versions 7.50 through 7.54 Description The issue allows an authenticated attacker to store a malicious payload, resulting in a Stored Cross Site Scripting vulnerability. This occurs under certain...

PT-2020-18985

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.02 through 7.40 SAP ABAP Platform versions 7.50 through 7.54 Description The SAML SSO implementation allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Respon...

CVE-2020-6185: Improper Neutralization of Input During Web Page Generation

Under certain conditions ABAP Online Community in SAP NetWeaver SAPBASIS version 7.40 and SAP S/4HANA SAPBASIS versions 7.50, 7.51, 7.52, 7.53, 7.54, allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability...

PT-2020-18996

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management ICE Service versions 7.30 through 7.50 Description The issue allows an unauthenticated attacker to execute malicious scripts, leading to a Reflected Cross-Site Scripting XSS vulnerability. This means an...

PT-2020-18990

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Guided Procedures versions 7.10 through 7.50 Description The issue arises from insufficient validation of an XML document input from a compromised admin, leading to Denial of Service. Recommendations For SAP NetWeaver Guided...

SAP NetWeaver Internet Communication Manager DoS

The vulnerability of the SAP NetWeaver Internet Communication Manager web application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...