Vulnerabilities > SAP > Fiori Launchpad > 752

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-09	CVE-2020-6283	Cross-site Scripting vulnerability in SAP Fiori Launchpad SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, resulting in reflected Cross-Site Scripting (XSS) vulnerability. network low complexity sap CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.