CVE-2020-6283
CVE-2020-6283
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.8EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 sep 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, resulting in reflected Cross-Site Scripting (XSS) vulnerability. With a successful attack, the attacker can steal authentication information of the user, such as data relating to his or her current session.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Productos afectados
SAP SE · SAP Fiori(Launchpad)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →