Read the docs
TI-2020-05085 Aliases CVE-2020-6229GHSA-p9pq-9vfw-wcq6

Cross-site scripting in SAP NetWeaver AS ABAP

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Why it matters now

EPSS 0.00654 51st percentileScored 2026-11-07
Fix Fixed SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME) (SAP SE): 700, 701, 702 +13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SAPSAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME)before 700; before 701; before 702; before 710; before 711; before 730; before 731; before 740; before 750; before 751; before 752; before 75A; before 75B; before 75C; before 75D; before 75E700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75EPatch availableCNA
  • SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME) VendorSAP Affected before 700; before 701; before 702; before 710; before 711; before 730; before 731; before 740; before 750; before 751; before 752; before 75A; before 75B; before 75C; before 75D; before 75E Fixed in 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E Patch available CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75a:*:*:*:*:*:*:*75aVulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75b:*:*:*:*:*:*:*75bVulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75c:*:*:*:*:*:*:*75cVulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75d:*:*:*:*:*:*:*75dVulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75e:*:*:*:*:*:*:*75eVulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700:*:*:*:*:*:*:*700VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701:*:*:*:*:*:*:*701VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702:*:*:*:*:*:*:*702VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:710:*:*:*:*:*:*:*710VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:711:*:*:*:*:*:*:*711VulnerableSAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75a:*:*:*:*:*:*:* Versions 75a Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75b:*:*:*:*:*:*:* Versions 75b Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75c:*:*:*:*:*:*:* Versions 75c Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75d:*:*:*:*:*:*:* Versions 75d Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75e:*:*:*:*:*:*:* Versions 75e Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700:*:*:*:*:*:*:* Versions 700 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701:*:*:*:*:*:*:* Versions 701 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702:*:*:*:*:*:*:* Versions 702 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:710:*:*:*:*:*:*:* Versions 710 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:711:*:*:*:*:*:*:* Versions 711 Vulnerable ·SAP
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:730:*:*:*:*:*:*:*730VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731:*:*:*:*:*:*:*731VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740:*:*:*:*:*:*:*740VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750:*:*:*:*:*:*:*750VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751:*:*:*:*:*:*:*751VulnerableSAP
cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752:*:*:*:*:*:*:*752VulnerableSAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:730:*:*:*:*:*:*:* Versions 730 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731:*:*:*:*:*:*:* Versions 731 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740:*:*:*:*:*:*:* Versions 740 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750:*:*:*:*:*:*:* Versions 750 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751:*:*:*:*:*:*:* Versions 751 Vulnerable ·SAP
  • cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752:*:*:*:*:*:*:* Versions 752 Vulnerable ·SAP

Remediation

  • Fix · CNA SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME) (SAP SE) Fixed in 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-6229
  2. 2026-10-03 Alias added: GHSA-p9pq-9vfw-wcq6
  3. 2026-10-14 EPSS moved to the 50th–90th percentile

References

Advisory 2

  • TI-2023-13615 Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages) CVSS 3.1MEDIUM 6.5
  • TI-2020-05071 Open redirect in SAP NetWeaver AS ABAP CVSS 3.1MEDIUM 6.1
  • TI-2020-05176 Cross-site scripting in SAP NetWeaver AS ABAP CVSS 3.1MEDIUM 6.1
  • TI-2020-05069 Cross-site scripting in SAP NetWeaver AS ABAP CVSS 3.1MEDIUM 6.1
  • TI-2020-05061 Cross-site scripting in SAP NetWeaver Application Server ABAP - SAP_BASIS CVSS 3.1MEDIUM 6.1
  • TI-2020-05102 Cross-site scripting in SAP NetWeaver AS ABAP CVSS 3.1MEDIUM 6.1
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences