CVE-2020-6181: SAP Abap Platform

Medium severity, CVSS 5.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.

Affected products

• SAP Abap Platform: version 7.50 only; version 7.51 only; version 7.52 only; version 7.53 only; version 7.54 only
• SAP NetWeaver: version 7.02 only; version 7.30 only; version 7.31 only; version 7.40 only

Published 2020-02-12. Last modified 2026-06-17.