CVE-2020-6203
CVE-2020-6203
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.1EPSS 1.9%KEV nãoPoC —Patch —
Lifecycle
Mar 10, 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs, leading to Path Traversal.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
SAP SE · SAP NetWeaver UDDI Server (Services Registry)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →