SAP SE SAP Commerce Cloud (Testweb Extension) vulnerabilities

1 vulnerability

Known vulnerabilities in SAP SE SAP Commerce Cloud (Testweb Extension), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2020-6201sap sesap commerce cloud (testweb extension)+1
EPSS score
0.80%
The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlled inputs, due to which certain GET URL parameters are reflected in the HTTP responses without escaping/sanitization, leading to Reflected Cross Site Scripting.