by Kastro
Paper/Archive/CVE-2020-6252

CVE-2020-6252

SAP SE SAP Adaptive Server Enterprise (Cockpit) — Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get…

EPSS 0.5%CVSS 9.0
critical.is priorityof 100
36
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 44.1.441 × 208.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.

Affected

ProductAffectedFixed inSource
SAP Adaptive Server Enterprise (Cockpit)< 16.0–CNA

Scores by source

sap (CNA)9.0CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refwiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222reflaunchpad.support.sap.com/#/notes/2917090