SAP security note 2960329, “[CVE-2020-6323] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (Fiori Framework Page)”. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
SAP NetWeaver Enterprise Portal (Fiori Framework Page) does not sufficiently encode user-controlled inputs, allowing an attacker with a valid session to create an XSS vulnerability. This XSS can be both reflected immediately and persisted for future access, leading to Cross Site Scripting attacks.
Impacts of XSS Vulnerability:
- Non-permanently deface or modify displayed content from a website.
- Steal authentication information of the user, such as session data.
- Impersonate the user and access information with the same rights as the target user.
Solution
The vulnerability is mitigated by ensuring the correct content-type is returned, preventing successful XSS attacks. To address this issue, implement the Support Packages and Patches referenced in this SAP Note.
CVSS
Score 4.4 Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- CVE-2020-6323
Affected components
- EP-FLP 7.50
- EP-RUNTIME 7.31, 7.40
Full note on SAP: SAP Support Launchpad note 2960329
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].