← Back

CVE-2020-6228

nvd nist
Published: Apr 14, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer.

Affected (45)

Products: Sap: Business Client
Sap
1 product
Business Client
Configuration A
45 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Business Client
Version 6.0
Business Client
Version 6.0 patch_level10
Business Client
Version 6.0 patch_level11
Business Client
Version 6.0 patch_level12
Business Client
Version 6.0 patch_level13
Business Client
Version 6.0 patch_level14
Business Client
Version 6.0 patch_level15
Business Client
Version 6.0 patch_level16
Business Client
Version 6.0 patch_level17
Business Client
Version 6.0 patch_level1
Business Client
Version 6.0 patch_level2
Business Client
Version 6.0 patch_level3
Business Client
Version 6.0 patch_level4
Business Client
Version 6.0 patch_level5
Business Client
Version 6.0 patch_level6
Business Client
Version 6.0 patch_level7
Business Client
Version 6.0 patch_level8
Business Client
Version 6.0 patch_level9
Business Client
Version 6.5
Business Client
Version 6.5 patch_level10
Business Client
Version 6.5 patch_level11
Business Client
Version 6.5 patch_level12
Business Client
Version 6.5 patch_level13
Business Client
Version 6.5 patch_level14
Business Client
Version 6.5 patch_level15
Business Client
Version 6.5 patch_level16
Business Client
Version 6.5 patch_level17
Business Client
Version 6.5 patch_level18
Business Client
Version 6.5 patch_level19
Business Client
Version 6.5 patch_level1
Business Client
Version 6.5 patch_level2
Business Client
Version 6.5 patch_level3
Business Client
Version 6.5 patch_level4
Business Client
Version 6.5 patch_level5
Business Client
Version 6.5 patch_level6
Business Client
Version 6.5 patch_level7
Business Client
Version 6.5 patch_level8
Business Client
Version 6.5 patch_level9
Business Client
Version 7.0
Business Client
Version 7.0 patch_level1
Business Client
Version 7.0 patch_level2
Business Client
Version 7.0 patch_level3
Business Client
Version 7.0 patch_level4
Business Client
Version 7.0 patch_level5
Business Client
Version 7.0 patch_level6

Related CWEs

CWE-354
Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References (4)

Source: cna@sap.com
Permissions RequiredVendor Advisory
Source: cna@sap.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.