Denial of Service Vulnerability in SAP NetWeaver Guided Procedures
CVE-2020-6187

4.9MEDIUM

Key Information:

Vendor
SAP
Status
SAP Netweaver (guided Procedures)
Vendor
CVE Published:
12 February 2020

Summary

The vulnerability in SAP NetWeaver (Guided Procedures) allows an attacker with admin access to exploit insufficient validation of XML document inputs. This may lead to a Denial of Service, disrupting the availability of the service. Administrators should promptly address this issue by applying the necessary patches and updates to mitigate the risks associated with this exploit.

Affected Version(s)

SAP NetWeaver (Guided Procedures) = 7.10 = 7.10

SAP NetWeaver (Guided Procedures) = 7.11 = 7.11

SAP NetWeaver (Guided Procedures) = 7.20 = 7.20

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2864415
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.