CVE-2020-6318critical

CVE-2020-6318: falha crítica em SAP NetWeaver (ABAP Server) and ABAP Platform

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ABAP Platform+ Monitorar SAP NetWeaver

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

48Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 9.1epss 5.8%
A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the products to terminate.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
SAP SE · SAP NetWeaver (ABAP Server) and ABAP Platform
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — SAP NetWeaver (ABAP Server) and ABAP Platform

No mesmo produto, das mais perigosas para as menos.

CVE-2020-6296HIGHCVE-2020-6296EPSS 1.3%CVE-2020-6280LOWCVE-2020-6280EPSS 0.9%CVE-2020-6310MEDIUMCVE-2020-6310EPSS 0.9%CVE-2020-6299MEDIUMCVE-2020-6299EPSS 0.9%