CVE-2020-6324: XSS
SAP Netweaver AS ABAP(BSP Test Application sbspexttable), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim?s browser leading to Reflected Cross Site Scripting.
Other sources
SAP Netweaver AS ABAP(BSP Test Application sbspexttable), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s browser leading to Reflected Cross Site Scripting.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-6324?
The severity of CVE-2020-6324 is medium with a CVSS score of 6.1.
How does CVE-2020-6324 vulnerability affect SAP NetWeaver AS ABAP(BSP Test Application sbspext_table)?
CVE-2020-6324 vulnerability allows an unauthenticated attacker to send a polluted URL to the victim, enabling them to read and modify information in the victim's browser.
Which versions of SAP NetWeaver AS ABAP(BSP Test Application sbspext_table) are affected by CVE-2020-6324?
CVE-2020-6324 affects the following versions of SAP NetWeaver AS ABAP(BSP Test Application sbspext_table): 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755.
How can I fix CVE-2020-6324?
To fix CVE-2020-6324, apply the necessary patches provided by SAP as mentioned in the official SAP notes and documentation.
Where can I find more information about CVE-2020-6324?
You can find more information about CVE-2020-6324 in the official SAP notes: [Support Portal](https://launchpad.support.sap.com/#/notes/2948239) and [SCN Wiki](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700).