CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.6. See the original NVD description below for full technical details.
CVE
CVE-2020-26815
Severity
HIGH
CVSS
8.6
EPSS
1.40%
Original NVD Description
SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network to retrieve sensitive / confidential resources which are otherwise restricted for internal usage only, resulting in a Server-Side Request Forgery vulnerability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)