CVE-2020-6285
First published: Tue Jul 14 2020(Updated: )
SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver | =7.10 | |
| SAP NetWeaver | =7.11 | |
| SAP NetWeaver | =7.20 | |
| SAP NetWeaver | =7.30 | |
| SAP NetWeaver | =7.31 | |
| SAP NetWeaver | =7.40 | |
| SAP NetWeaver | =7.50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SAP NetWeaver vulnerability?
The vulnerability ID for this SAP NetWeaver vulnerability is CVE-2020-6285.
What is the severity of CVE-2020-6285?
The severity of CVE-2020-6285 is high.
Which versions of SAP NetWeaver are affected by CVE-2020-6285?
The affected versions of SAP NetWeaver are 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50.
What is the impact of CVE-2020-6285?
CVE-2020-6285 allows an attacker to access restricted information, leading to information disclosure.
Are there any references for CVE-2020-6285?
Yes, you can find more information about CVE-2020-6285 at the following references: [Link 1](https://launchpad.support.sap.com/#/notes/2932473) and [Link 2](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675).
- collector/nvd-index
- vendor/sap
- canonical/sap netweaver
- version/sap netweaver/7.10
- version/sap netweaver/7.11
- version/sap netweaver/7.20
- version/sap netweaver/7.30
- version/sap netweaver/7.31
- version/sap netweaver/7.40
- version/sap netweaver/7.50