CVE-2020-26819
First published: Tue Nov 10 2020(Updated: )
SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that allows them to read and delete database logfiles because of Improper Access Control.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver Application Server ABAP | =731 | |
| SAP NetWeaver Application Server ABAP | =740 | |
| SAP NetWeaver Application Server ABAP | =750 | |
| SAP NetWeaver Application Server ABAP | =751 | |
| SAP NetWeaver Application Server ABAP | =752 | |
| SAP NetWeaver Application Server ABAP | =753 | |
| SAP NetWeaver Application Server ABAP | =754 | |
| SAP NetWeaver Application Server ABAP | =755 | |
| SAP NetWeaver Application Server ABAP | =782 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-26819?
The severity of CVE-2020-26819 is high with a severity value of 8.8.
Which versions of SAP NetWeaver AS ABAP are affected by CVE-2020-26819?
The versions 731, 740, 750, 751, 752, 753, 754, 755, and 782 of SAP NetWeaver AS ABAP are affected by CVE-2020-26819.
How can an authenticated user access Web Dynpro components in CVE-2020-26819?
An authenticated user can access Web Dynpro components in CVE-2020-26819 by exploiting a vulnerability that allows them to read and delete database logfiles due to improper access control.
What is the SAP NetWeaver Application Server ABAP?
The SAP NetWeaver Application Server ABAP is a software platform used for the development and deployment of ABAP-based applications in the SAP environment.
Where can I find more information about CVE-2020-26819?
You can find more information about CVE-2020-26819 on the SAP Support Launchpad and the SAP Community Network Wiki.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap netweaver application server abap
- version/sap netweaver application server abap/731
- version/sap netweaver application server abap/740
- version/sap netweaver application server abap/750
- version/sap netweaver application server abap/751
- version/sap netweaver application server abap/752
- version/sap netweaver application server abap/753
- version/sap netweaver application server abap/754
- version/sap netweaver application server abap/755
- version/sap netweaver application server abap/782