VYPR
← All advisories
High severity8.6NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026

CVE-2020-26815

CVE-2020-26815

Description

SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network to retrieve sensitive / confidential resources which are otherwise restricted for internal usage only, resulting in a Server-Side Request Forgery vulnerability.

Affected products

8
  • SAP/Fiori Launchpad \(news Tile Application\)6 versions
    cpe:2.3:a:sap:fiori_launchpad_\(news_tile_application\):750:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:sap:fiori_launchpad_\(news_tile_application\):750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori_launchpad_\(news_tile_application\):751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori_launchpad_\(news_tile_application\):752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori_launchpad_\(news_tile_application\):753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori_launchpad_\(news_tile_application\):754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori_launchpad_\(news_tile_application\):755:*:*:*:*:*:*:*
  • SAP/Fiori Launchpadllm-fuzzy
    Range: 750,751,752,753,754,755
  • SAP SE/SAP Fiori Launchpad (News Tile Application)v5
    Range: < 750

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.