Vulnerabilities > SAP > Disclosure Management > Low

DATE CVE VULNERABILITY TITLE RISK
2020-01-14 CVE-2020-6303 Cross-site Scripting vulnerability in SAP Disclosure Management
SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.
network
sap CWE-79
3.5
2019-02-15 CVE-2019-0254 Cross-site Scripting vulnerability in SAP Disclosure Management
SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
network
sap CWE-79
3.5