CVE-2020-6295high

CVE-2020-6295: falha de alta gravidade em SAP Adaptive Server Enterprise

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP Adaptive Server Enterprise

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.3%
Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to view, modify and/or make unavailable any data associated with the Cockpit, leading to Information Disclosure.
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
SAP SE · SAP Adaptive Server Enterprise
CVEs relacionadas — SAP Adaptive Server Enterprise

No mesmo produto, das mais perigosas para as menos.

CVE-2020-6241HIGHCVE-2020-6241EPSS 1.0%CVE-2020-6259MEDIUMCVE-2020-6259EPSS 0.8%CVE-2020-6250MEDIUMCVE-2020-6250EPSS 0.5%CVE-2019-0402—CVE-2019-0402EPSS 0.4%CVE-2020-6317LOWCVE-2020-6317EPSS 0.4%CVE-2022-22528—CVE-2022-22528EPSS 0.3%