CVE-2020-26838critical

CVE-2020-26838: fallo crítico en SAP Business Warehouse

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP Business Warehouse+ Monitorear SAP BW/4HANA

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 2.2%
SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Productos afectados
SAP SE · SAP Business WarehouseSAP SE · SAP BW4HANA
CVEs relacionadas — SAP Business Warehouse

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-21465CRITICALCVE-2021-21465EPSS 3.7%CVE-2021-21466CRITICALCVE-2021-21466EPSS 3.1%CVE-2021-21468MEDIUMCVE-2021-21468EPSS 1.9%