CVE-2020-6252
CVE-2020-6252
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 May 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
SAP SE · SAP Adaptive Server Enterprise (Cockpit)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →