CVE-2020-6260

medium

Description

SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed by the application, due to Incomplete XML Validation. The application shows additional data that do not actually exist.

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775

https://launchpad.support.sap.com/#/notes/2915126

Details

Source: Mitre, NVD

Published: 2020-06-10

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N