CVE-2020-6280low

CVE-2020-6280: low-severity vulnerability in SAP NetWeaver (ABAP Server) and ABAP Platform

Published · Updated

Follow this CVE+ Monitor ABAP Platform+ Monitor SAP NetWeaver

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.7epss 0.9%
SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted, leading to Information Disclosure.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Affected products
SAP SE · SAP NetWeaver (ABAP Server) and ABAP Platform
Related CVEs — SAP NetWeaver (ABAP Server) and ABAP Platform

In the same product, most dangerous first.

CVE-2020-6318CRITICALCVE-2020-6318EPSS 5.8%CVE-2020-6296HIGHCVE-2020-6296EPSS 1.3%CVE-2020-6310MEDIUMCVE-2020-6310EPSS 0.9%CVE-2020-6299MEDIUMCVE-2020-6299EPSS 0.9%