CVE-2020-6229

MEDIUM 6.1CVE-2020-6229 · Published 14/04/2020 · updated 17/06/2026

In short

CVE-2020-6229 is a MEDIUM (CVSS 6.1) vulnerability affecting netweaver as abap business server pages (sap).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netweaver as abap business server pages sap	`= 700= 701= 702= 710= 711= 730= 731= 740= 750= 751= 752= 75a= 75b= 75c= 75d= 75e`	No fix yet

Description

SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

More vulnerabilities in netweaver as abap business server pages

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netweaver as abap business server pages

sap

= 700= 701= 702= 710= 711= 730= 731= 740= 750= 751= 752= 75a= 75b= 75c= 75d= 75e

No fix yet

More vulnerabilities in netweaver as abap business server pages

See all →