Lucene search
+L

7 matches found

OSV
OSV
•added 2020/09/09 2:15 p.m.•13 views

CVE-2020-6324

SAP Netweaver AS ABAPBSP Test Application sbspexttable, version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s brows...

6.1CVSS7.3AI score0.00895EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/09/09 2:15 p.m.•6 views

CVE-2020-6324

SAP Netweaver AS ABAPBSP Test Application sbspexttable, version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s brows...

6.1CVSS6.7AI score0.00895EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2020/09/09 1:10 p.m.•77 views

CVE-2020-6324

The CVE-2020-6324 entry affects SAP NetWeaver AS ABAP (BSP Test Application sbspext_table) across SAP NetWeaver ABAP versions 700–755. The vulnerability is a Reflected Cross-Site Scripting issue triggered by an unauthenticated user sending a polluted URL; when the victim clicks, the attacker can ...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/09 12:00 a.m.•2 views

CVE-2020-6324: Improper Neutralization of Input During Web Page Generation

SAP Netweaver AS ABAPBSP Test Application sbspexttable, version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s brows...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/06/10 1:15 p.m.•10 views

CVE-2020-6246

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTTABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

6.1CVSS6AI score0.00654EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2020/06/10 12:34 p.m.•59 views

CVE-2020-6246

CVE-2020-6246 affects SAP NetWeaver AS ABAP Business Server Pages SBSPEXT_TABLE (versions 700–754). It is a reflected XSS due to insufficient encoding of user-controlled inputs in SBSPEXT_TABLE, as documented by SAP/Red Hat and NVD references. Impacts: low confidentiality and integrity (per CVSS ...

6.1CVSS5.9AI score0.00654EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/10 12:00 a.m.•8 views

CVE-2020-6246: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTTABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

6.1CVSS5.7AI score0.00654EPSS
SaveExploits0References2
Rows per page
Query Builder