CVE-2020-6266: SAP Fiori

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection.

Affected products

• SAP Fiori: version 200 only; version 300 only; version 400 only; version 500 only

Published 2020-06-10. Last modified 2026-06-17.