CVE-2020-6303

SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting

Medium · published January 14, 2020

CVSS v3.0
5.4
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00536 · 44.4th percentile
Published
2020-01-14T17:52Z
EPSS history
Timeline
  • 14 JAN 17:52Z
    SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting
    cvelistv5