CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-6246

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.5%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2020-6246

Sap » Netweaver As Abap Business Server Pages » Version: 700

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700
Sap » Netweaver As Abap Business Server Pages » Version: 701

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701
Sap » Netweaver As Abap Business Server Pages » Version: 702

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702
Sap » Netweaver As Abap Business Server Pages » Version: 730

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:730
Sap » Netweaver As Abap Business Server Pages » Version: 731

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731
Sap » Netweaver As Abap Business Server Pages » Version: 740

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740
Sap » Netweaver As Abap Business Server Pages » Version: 750

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750
Sap » Netweaver As Abap Business Server Pages » Version: 751

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751
Sap » Netweaver As Abap Business Server Pages » Version: 752

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752
Sap » Netweaver As Abap Business Server Pages » Version: 753

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:753
Sap » Netweaver As Abap Business Server Pages » Version: 754

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:754

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-6246

Products

Pricing

Contact Us