CVE-2020-6367

There is a reflected cross site scripting vulnerability in SAP NetWeaver Composite Application Framework, versions - 7.20, 7.30, 7.31, 7.40, 7.50. An unauthenticated attacker can trick an unsuspecting authenticated user to click on a malicious link. The end users browser has no way to know that t...

CVE-2020-6367

CVE-2020-6367 — Affected software and impact: SAP NetWeaver Composite Application Framework (CAF) across versions 7.20, 7.30, 7.31, 7.40, and 7.50 suffers a reflected cross-site scripting (XSS) vulnerability. An unauthenticated attacker can trick an authenticated user into clicking a malicious li...

SAP NetWeaver Composite Application Framework Cross-Site Scripting Vulnerability

SAP NetWeaver Composite Application Framework is a tool for using SAP cross-applications and composite applications following the Enterprise Services Architecture of SAP, Germany. A cross-site script execution vulnerability exists in SAP NetWeaver Composite Application Framework 7.20, 7.30, 7.31,...