SAP Fiori Launchpad (news Tile Application) vulnerabilities

2 CVEs affecting SAP Fiori Launchpad (news Tile Application), 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-26825, published 2020-11-13.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-26815, published 2020-11-10. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web application. It is usually used to…
• CVE-2020-26825, published 2020-11-13. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a…