CVE-2020-6253high

CVE-2020-6253: high-severity vulnerability in SAP Adaptive Server Enterprise (Web Services)

Published · Updated

Follow this CVE+ Monitor SAP Adaptive Server Enterprise

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 1.2%
Under certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL Injection.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
SAP SE · SAP Adaptive Server Enterprise (Web Services)