CVE-2020-6285: High severity sap netweaver vulnerability

Published Jul 14, 2020

Updated

SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.

Affected Software

7 affected components

SAP NetWeaver=7.10

SAP NetWeaver=7.11

SAP NetWeaver=7.20

SAP NetWeaver=7.30

SAP NetWeaver=7.31

SAP NetWeaver=7.40

SAP NetWeaver=7.50

Event History

Jul 14, 2020

CVE Published

via MITRE·12:30 PM

Data Sourced

via MITRE·12:30 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this SAP NetWeaver vulnerability?

The vulnerability ID for this SAP NetWeaver vulnerability is CVE-2020-6285.

What is the severity of CVE-2020-6285?

The severity of CVE-2020-6285 is high.

Which versions of SAP NetWeaver are affected by CVE-2020-6285?

The affected versions of SAP NetWeaver are 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50.

What is the impact of CVE-2020-6285?

CVE-2020-6285 allows an attacker to access restricted information, leading to information disclosure.

Are there any references for CVE-2020-6285?

Yes, you can find more information about CVE-2020-6285 at the following references: [Link 1](https://launchpad.support.sap.com/#/notes/2932473) and [Link 2](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675).