Vulnerability · Published Oct 15, 2020 · Assigned by sap
CVE-2020-6371
Medium 4.3
In plain English
A medium-severity security flaw in SAP NetWeaver Application Server ABAP (POWL test application) from SAP SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.0)4.3Medium
Exploit odds (30 days)0.9%top 40.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP NetWeaver Application Server ABAP (POWL test application) | < 710< 711< 730< 731< 740< 750 |
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 x_refsource_MISC
- https://launchpad.support.sap.com/#/notes/2963137 x_refsource_MISC