CVE-2020-6210

Name of the Vulnerable Software and Affected Versions SAP Fiori Launchpad versions 753 through 754

Description The issue arises from insufficient encoding of user-controlled inputs, allowing an attacker to inject meta tags into the launchpad HTML. This is achieved by exploiting the vulnerable parameter, leading to a reflected Cross-Site Scripting (XSS) issue.

Recommendations For SAP Fiori Launchpad versions 753 through 754, update to a version that includes the fix for this issue to prevent reflected Cross-Site Scripting (XSS) attacks.