CVE-2020-6266: Medium severity sap fiori vulnerability
Published Jun 10, 2020
·Updated
SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection.
Affected Software
4 affected components
SAP Fiori=200
SAP Fiori=300
SAP Fiori=400
SAP Fiori=500
Event History
Jun 10, 2020
CVE Published
via MITRE·12:51 PM
Data Sourced
via MITRE·12:51 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-6266?
CVE-2020-6266 is classified as a medium severity vulnerability due to its impact on user redirection.
2
How do I fix CVE-2020-6266?
To address CVE-2020-6266, ensure that URL validation is correctly implemented in your SAP Fiori application.
3
What are the affected versions of SAP Fiori in CVE-2020-6266?
CVE-2020-6266 affects SAP Fiori versions 200, 300, 400, and 500.
4
What type of attack can exploit CVE-2020-6266?
CVE-2020-6266 can be exploited through malicious URL redirection, leading users to potentially harmful sites.
5
Is user data at risk due to CVE-2020-6266?
Yes, user data may be at risk as attackers can redirect users to compromised sites via CVE-2020-6266.