CVE-2020-6280

CVSS 2.7 LOWEPSS 0.9%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 2.7EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Jul 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted, leading to Information Disclosure.

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Affected products

SAP SE · SAP NetWeaver (ABAP Server) and ABAP Platform

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://launchpad.support.sap.com/#/notes/2927373 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675