Files
CVEs-PoC/2020/CVE-2020-6238.md
T
2025-09-29 21:09:30 +02:00

1.1 KiB

CVE-2020-6238

Description

SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the Rest API from Servlet xyformsweb, leading to Missing XML Validation. This affects confidentiality and availability (partially) of SAP Commerce.

POC

Reference

No PoCs from references.

Github