CVE-2020-6217

—

CVSS 3.1

6.1 medium

EPSS

<1%p49

Published

Apr 14, 2020 (Apr 14, 2020)

Modified

Jun 17, 2026

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Vendors: sap
Products: netweaver as abap business server pages
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.