2 matches found
CVE-2020-6370: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver Design Time Repository DTR, versions - 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
4.8CVSS8.2AI score0.00527EPSS
SaveExploits0References2
PT-2020-19143
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Design Time Repository DTR versions 7.11, 7.30, 7.31, 7.40, 7.50 Description The issue results from insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS problem. Recommendations For versions 7.11...
4.8CVSS0.00527EPSS
SaveExploits0References4
20