Vulnerability Details CVE-2020-6213
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting (XSS) via different URL parameters as it does not sufficiently encode user controlled inputs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2020-6213
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:730
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:753
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:754