by Kastro
Paper/Archive/CVE-2020-6248

CVE-2020-6248

SAP SE SAP Adaptive Server Enterprise (Backup Server) — SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an authenticated user…

EPSS 2%CVSS 9.1
critical.is priorityof 100
43
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 79.5.795 × 2015.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection.

Affected

ProductAffectedFixed inSource
SAP Adaptive Server Enterprise (Backup Server)< 16.0–CNA

Scores by source

sap (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refwiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222reflaunchpad.support.sap.com/#/notes/2917275