CVE-2020-6366

Published: Oct 20, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.2 / Impact: 5.2

Source: NVD

Description

SAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate uploaded XML documents. An attacker with administrative privileges can retrieve arbitrary files including files on OS level from the server and/or can execute a denial-of-service.

Affected (5)

Products: Sap: Netweaver Compare Systems

Sap

1 product

Netweaver Compare Systems

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Compare Systems	Version 7.20
Sap Netweaver Compare Systems	Version 7.30
Sap Netweaver Compare Systems	Version 7.31
Sap Netweaver Compare Systems	Version 7.40
Sap Netweaver Compare Systems	Version 7.50