CVE-2020-6267: SAP Disclosure Management

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag.

Affected products

• SAP Disclosure Management: version 10.1 only

Published 2020-07-14. Last modified 2026-06-17.