Vulnerability Details CVE-2020-6229
SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.5%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2020-6229
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:710
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:711
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:730
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75a
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75b
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75c
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75d
-
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75e