CVE-2020-6210: SAP Fiori Launchpad

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, leading to reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

• SAP Fiori Launchpad: version 753 only; version 754 only

Published 2020-03-10. Last modified 2026-06-17.