CVE-2020-6200: SAP Commerce Cloud

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template injection, a variant of Cross-Site-Scripting (XSS) that exploits the templating facilities of the angular framework.

Affected products

• SAP Commerce Cloud: version 6.6 only; version 6.7 only; version 1808 only; version 1811 only

Published 2020-03-10. Last modified 2026-06-17.