Medium severity5.4NVD Advisory· Published Oct 15, 2020· Updated Jun 17, 2026
CVE-2020-6368
CVE-2020-6368
Description
SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authorization, and to potentially obtain authentication information from other legitimate users, leading to Cross Site Scripting.
Affected products
11cpe:2.3:a:sap:business_planning_and_consolidation:100:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:sap:business_planning_and_consolidation:100:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:200:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:750:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:751:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:752:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:753:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:754:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:755:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_planning_and_consolidation:810:*:*:*:*:*:*:*
- (no CPE)range: 750, 751, 752, 753, 754, 755, 810, 100, 200
- SAP SE/SAP Business Planning and Consolidationv5Range: < 750
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.