CVE-2020-6303: SAP Disclosure Management

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.

Affected products

• SAP Disclosure Management: before 10.1 (fixed in 10.1)

Published 2020-01-14. Last modified 2026-06-17.