CVEvulnerability

CVE-2020-6318

7.2 HIGH Published 2020-09-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-94

Description

A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the products to terminate.

Affected configurations

• sap abap platform 700 • sap abap platform 701 • sap abap platform 702 • sap abap platform 710 • sap abap platform 711 • sap abap platform 730 • sap abap platform 731 • sap abap platform 740 • sap abap platform 750 • sap abap platform 751 • sap abap platform 753 • sap abap platform 754 • sap abap platform 755

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References