SAP SE Automated Note Search Tool (SAP Basis) vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE Automated Note Search Tool (SAP Basis), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3MediumCVE-2020-6307sap se · automated note search tool (sap basis) +1 moresap se automated note search tool (sap basis)Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.EPSS0.72%6.1MediumCVE-2020-6184sap se · automated note search tool (sap basis) +2 moresap se automated note search tool (sap basis)Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability.EPSS0.96%