SAP SE SAP Fiori(Launchpad) vulnerabilities

1 vulnerability

Known vulnerabilities in SAP SE SAP Fiori(Launchpad), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1MediumCVE-2020-6283sap se · sap fiori(launchpad) +1 moresap se sap fiori(launchpad)SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, resulting in reflected Cross-Site Scripting (XSS) vulnerability. With a successful attack, the attacker can steal authentication information of the user, such as data relating to his or her current session.EPSS0.68%