Riskcovery

CVE-2020-6262

State
Published
Severity
9.9 Critical
Published
May 12, 2020
Updated
Aug 4, 2024
Reserved
Jan 8, 2020

Read the record on cve.org

Description

Service Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application and the whole ABAP system leading to Code Injection.

Scores

CVSSScoreVectorSource
3.09.9 CriticalCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsap

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP Application Server ABAP (ST-PI)SAP SE
  • < 2008_1_46CAffected
  • < 2008_1_620Affected
  • < 2008_1_640Affected
  • < 2008_1_700Affected
  • < 2008_1_710Affected
  • < 740Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.