CVE-2020-6212medium

CVE-2020-6212: medium-severity vulnerability in SAP ERP

Published · Updated

Follow this CVE+ Monitor SAP S/4HANA+ Monitor SAP ERP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.7%
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
SAP SE · SAP ERPSAP SE · SAP S/4 HANA
Related CVEs — SAP ERP

In the same product, most dangerous first.

CVE-2020-6316MEDIUMCVE-2020-6316EPSS 0.8%