CVE-2020-26820

🗓️ 10 Nov 2020 16:14:04Reported by sapType

SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50 privilege escalation

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-26820	10 Nov 202020:26	–	circl
CNVD	SAP NetWeaver AS JAVA Command Execution Vulnerability (CNVD-2020-62998)	12 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-26820	10 Nov 202016:14	–	cvelist
EUVD	EUVD-2020-19356	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in SAP products	10 Nov 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in SAP products	12 Jan 202100:00	–	ncsc
NVD	CVE-2020-26820	10 Nov 202017:15	–	nvd
Prion	Privilege escalation	10 Nov 202017:15	–	prion
RedhatCVE	CVE-2020-26820	5 Feb 202513:34	–	redhatcve
Tenable Nessus	SAP NetWeaver AS Java and AS ABAP Multiple Vulnerabilities (Jan 2021)	1 Feb 202100:00	–	nessus

NVD

Vulners

Node

sap netweaver_application_server_javaMatch7.20

sap netweaver_application_server_javaMatch7.30

sap netweaver_application_server_javaMatch7.31

sap netweaver_application_server_javaMatch7.40

sap netweaver_application_server_javaMatch7.50

[
  {
    "product": "SAP NetWeaver AS JAVA",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 7.20"
      },
      {
        "status": "affected",
        "version": "< 7.30"
      },
      {
        "status": "affected",
        "version": "< 7.31"
      },
      {
        "status": "affected",
        "version": "< 7.40"
      },
      {
        "status": "affected",
        "version": "< 7.50"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/162086/SAP-Java-OS-Remote-Code-Execution.html
seclists	www.seclists.org/fulldisclosure/2021/Apr/7
wiki	www.wiki.scn.sap.com/wiki/pages/viewpage.action
launchpad	www.launchpad.support.sap.com/

21 Nov 2024 05:20Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2

CVSS 29

CVSS 39.1

EPSS0.03156

CWE-434