CVE-2020-6217: SAP NetWeaver As Abap Business Server Pages

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

• SAP NetWeaver As Abap Business Server Pages: version 700 only; version 701 only; version 702 only; version 730 only; version 731 only; version 740 only; …

Published 2020-04-14. Last modified 2026-06-17.