CVE-2020-6303

CVE-2020-6303 concerns SAP Disclosure Management prior to version 10.1, where the web application does not properly validate certain user inputs, enabling cross-site scripting (XSS) in specific use cases. The vulnerability is tied to insufficient client-side input validation in the web layer, lea...

CVE-2019-0254

CVE-2019-0254 affects SAP Disclosure Management (before version 10.1 Stack 1301). The issue is a Cross-Site Scripting (XSS) vulnerability caused by insufficient encoding of user-controlled inputs. The root cause is failure to properly filter/encode user-submitted input, allowing a remote attacker...