CVE-2020-6304
5.9MEDIUM
Key Information:
Summary
Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.
Affected Version(s)
SAP NetWeaver Internet Communication Manager (KERNEL) < 7.21 < 7.21
SAP NetWeaver Internet Communication Manager (KERNEL) < 7.22 < 7.22
SAP NetWeaver Internet Communication Manager (KERNEL) < 7.49 < 7.49
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved