CVE-2020-6206

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages

Medium · published March 10, 2020

CVSS v3.0
4.7
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery.

The record
Technical detail
CVSS v3.0
4.7 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Published
2020-03-10T20:20Z
EPSS history
Timeline
  • 10 MAR 20:20Z
    SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages
    cvelistv5