CVE-2020-6285 in NetWeaver

Résumé

par MITRE

SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: SAP SE
• Réserver: 08/01/2020
• Modérer: accepté
• Entrée: VDB-158057
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 7.7 (NVD)
• EPSS: 0.01107
• KEV: non
• Activités: très faible
• Secteur: Finance, Insurance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-6285
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-6285
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-6285/