VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026

CVE-2020-6266

CVE-2020-6266

Description

SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection.

Affected products

6
  • SAP/Fiori4 versions
    cpe:2.3:a:sap:fiori:200:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:fiori:200:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori:300:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori:400:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:fiori:500:*:*:*:*:*:*:*
  • SAP/SAP Fiori for SAP S/4HANAllm-fuzzy
    Range: 100, 200, 300, 400
  • SAP SE/SAP Fiori for SAP S/4HANAv5
    Range: < 200

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.