CVE-2020-26825

SAP Fiori Launchpad News tile (News tile Application) suffers a Reflected XSS in versions 750–755 due to insufficient encoding of user-controlled inputs, enabling an unauthenticated attacker to send malicious code that can be read and potentially modified in the victim’s browser. Impact per recor...

PT-2020-16510

Name of the Vulnerable Software and Affected Versions SAP Fiori Launchpad News tile Application versions 750 through 755 Description The issue allows an unauthorized attacker to send malicious code to a different end user victim using the SAP Fiori Launchpad News tile Application. This is due to...

CVE-2020-26825: Improper Neutralization of Input During Web Page Generation

SAP Fiori Launchpad News tile Application, versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a different end user victim, because News tile does not sufficiently encode user controlled inputs, resulting ...

CVE-2020-26815

CVE-2020-26815 concerns SAP Fiori Launchpad News tile Application, affected in versions 750–755. The connected sources describe a Server-Side Request Forgery (SSRF) vulnerability where an unauthenticated attacker can send a crafted request to a vulnerable web application, potentially exposing sen...

PT-2020-16500

Name of the Vulnerable Software and Affected Versions SAP Fiori Launchpad News tile Application versions 750,751,752,753,754,755 Description The issue allows an unauthorized attacker to send a crafted request to a vulnerable web application, typically used to target internal systems behind...

CVE-2020-26815: Server-Side Request Forgery (SSRF)

SAP Fiori Launchpad News tile Application, versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external...