Lucene search
SapCVELIST:CVE-2020-6249HistoryMay 12, 2020 - 5:48 p.m.
CVE-2020-6249
2020-05-1217:48:30
sap
www.cve.org
3
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
37.0%
The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection.
CNA Affected
[
{
"product": "SAP Master Data Governance (S4CORE)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 101"
}
]
},
{
"product": "SAP Master Data Governance (S4FND)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 102"
},
{
"status": "affected",
"version": "< 103"
},
{
"status": "affected",
"version": "< 104"
}
]
},
{
"product": "SAP Master Data Governance (SAP_BS_FND)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 748"
}
]
}
]Related
prion
prion
Sql injection
2020-05-12 18:15:00
nvd
nvd
CVE-2020-6249
2020-05-12 18:15:14
cve
cve
CVE-2020-6249
2020-05-12 18:15:14
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
37.0%
Related for CVELIST:CVE-2020-6249