Vulnerability Details CVE-2020-6215
SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.0%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 5.8
Products affected by CVE-2020-6215
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:730
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:753
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:754