SAP SE SAP Netweaver (SAP Basis) vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP Netweaver (SAP Basis), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.8CVE-2020-6181sap sesap abap platform (sap basis)+3
EPSS score
0.78%
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.5.4CVE-2020-6185sap sesap netweaver (sap basis)+3
EPSS score
0.54%
Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability.