by Kastro
Paper/Archive/CVE-2020-6230

CVE-2020-6230

SAP SE SAP OrientDB — SAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions to inject code that can be executed by…

EPSS 1%CVSS 9.1
critical.is priorityof 100
40
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 64.8.648 × 2013.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions to inject code that can be executed by the application and lead to Code Injection. An attacker could thereby control the behavior of the application.

Affected

ProductAffectedFixed inSource
SAP OrientDB< 3.0–CNA

Scores by source

sap (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refwiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202reflaunchpad.support.sap.com/#/notes/2900118