Low severity · published Jul 14, 2020
CVE-2020-6280
SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted,…
2.7
CVSS
0.9%
EPSS
No
On KEV
Description
SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted, leading to Information Disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Abap Platform · Sap
7.31; 7.40; 7.50 · source: NVD
NA
Netweaver Application Server Abap · Sap
731; 740; 750 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6280
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6280
Permissions Required
https://launchpad.support.sap.com/#/notes/2927373
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675
More from Abap Platform
9.8
CVE-2021-44231
Internally used text extraction reports allow an attacker to inject code that can be executed by the application
8.8
CVE-2020-6296
SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to inject code that can be executed by the…
7.2
CVE-2024-22131
In SAP ABA (Application Basis) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75I, an attacker authenticated as a user with a remote execution authorization can use a…
7.2
CVE-2020-6318
A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit…
5.8
CVE-2020-6181
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753,…