Vulnerability · Published Jun 10, 2020 · Assigned by sap
CVE-2020-6266
Medium 5.4
In plain English
A medium-severity security flaw in SAP Fiori for SAP S/4HANA from SAP SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.0)5.4Medium
Exploit odds (30 days)0.6%top 50.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP Fiori for SAP S/4HANA | < 200< 300< 400< 500 |
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775 x_refsource_MISC
- https://launchpad.support.sap.com/#/notes/2911704 x_refsource_MISC
- https://launchpad.support.sap.com/#/notes/2911687 x_refsource_MISC