CVE-2020-26808

Katalog CVE

CVSS 7.2 · High EPSS 3,1%

Kerentanan pada sap as abap(dmis), sap s4 hana(dmis). Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA(DMIS), versions - 101, 102, 103, 104, 105, allows an authenticated attacker to inject arbitrary code into function module leading to code injection that can be executed in the application which affects the confidentiality, availability and integrity of the application.

Rincian

Terbit di NVD

10 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 advisory vendor
• http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injec... exploit · advisory pihak ketiga · vdb entry
• http://seclists.org/fulldisclosure/2022/May/42 exploit · mailing list · advisory pihak ketiga
• https://launchpad.support.sap.com/#/notes/2973735 permissions required