CVE-2020-6305

Name of the Vulnerable Software and Affected Versions SAP Process Integration versions prior to the updates provided in SAP XIAF 7.31, 7.40, 7.50

Description The issue is related to insufficient protection of the web page structure in the REST adapter of the SAP Process Integration platform. This can allow a remote attacker to perform cross-site scripting (XSS) attacks.

Recommendations For versions prior to the updates provided in SAP XIAF 7.31, 7.40, 7.50, update to the respective version or later to resolve the issue. As a temporary workaround, consider restricting user-controlled inputs to minimize the risk of exploitation.