CVE-2020-6265: Critical severity sap commerce webservices vulnerability
SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-6265?
CVE-2020-6265 has been classified as a high severity vulnerability due to its potential to allow unauthorized access.
How do I fix CVE-2020-6265?
To fix CVE-2020-6265, you should remove hardcoded credentials and implement secure authentication mechanisms.
What systems are affected by CVE-2020-6265?
CVE-2020-6265 affects SAP Commerce versions 6.7, 1808, 1811, 1905, and SAP Commerce Data Hub of the same versions.
What type of vulnerability is CVE-2020-6265?
CVE-2020-6265 is an authentication bypass vulnerability caused by the use of hardcoded credentials.
Who developed SAP Commerce that is impacted by CVE-2020-6265?
SAP Commerce, which is affected by CVE-2020-6265, was developed by SAP SE.