Lucene search
SapCVELIST:CVE-2020-6298HistoryAug 12, 2020 - 1:41 p.m.
CVE-2020-6298
2020-08-1213:41:55
sap
www.cve.org
4
sap
banking services
unauthorized access
missing authorization check
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
AI Score
8
Confidence
High
EPSS
0.001
Percentile
28.4%
SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user to display protected Business Partner Generic Market Data (GMD) and change related GMD key figure values, due to Missing Authorization Check.
CNA Affected
[
{
"product": "SAP Banking Services (Generic Market Data)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 400"
},
{
"status": "affected",
"version": "< 450"
},
{
"status": "affected",
"version": "< 500"
}
]
}
]Related
prion
prion
Authorization
2020-08-12 14:15:00
cve
cve
CVE-2020-6298
2020-08-12 14:15:14
nvd
nvd
CVE-2020-6298
2020-08-12 14:15:14
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
AI Score
8
Confidence
High
EPSS
0.001
Percentile
28.4%
Related for CVELIST:CVE-2020-6298