CVE-2020-6244

sap business client

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-6244

Katalog CVE

CVSS 7.8 · High EPSS 0,34%

Kerentanan Uncontrolled Search Path Element pada sap business client. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the application.

Rincian

Terbit di NVD
12 Mei 2020
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-427: Uncontrolled Search Path Element
EPSS (30 hari)
0,34% peluang dieksploitasi; lebih tinggi dari 25,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sap business client Versi 6.0
sap business client Versi 6.0 patch_level1
sap business client Versi 6.0 patch_level10
sap business client Versi 6.0 patch_level11
sap business client Versi 6.0 patch_level12
sap business client Versi 6.0 patch_level13
sap business client Versi 6.0 patch_level14
sap business client Versi 6.0 patch_level15
sap business client Versi 6.0 patch_level16
sap business client Versi 6.0 patch_level17
sap business client Versi 6.0 patch_level2
sap business client Versi 6.0 patch_level3
sap business client Versi 6.0 patch_level4
sap business client Versi 6.0 patch_level5
sap business client Versi 6.0 patch_level6
sap business client Versi 6.0 patch_level7
sap business client Versi 6.0 patch_level8
sap business client Versi 6.0 patch_level9
sap business client Versi 6.5
sap business client Versi 6.5 patch_level1
sap business client Versi 6.5 patch_level10
sap business client Versi 6.5 patch_level11
sap business client Versi 6.5 patch_level12
sap business client Versi 6.5 patch_level13
sap business client Versi 6.5 patch_level14
sap business client Versi 6.5 patch_level15
sap business client Versi 6.5 patch_level16
sap business client Versi 6.5 patch_level17
sap business client Versi 6.5 patch_level18
sap business client Versi 6.5 patch_level19
sap business client Versi 6.5 patch_level2
sap business client Versi 6.5 patch_level20
sap business client Versi 6.5 patch_level21
sap business client Versi 6.5 patch_level22
sap business client Versi 6.5 patch_level3
sap business client Versi 6.5 patch_level4
sap business client Versi 6.5 patch_level5
sap business client Versi 6.5 patch_level6
sap business client Versi 6.5 patch_level7
sap business client Versi 6.5 patch_level8
sap business client Versi 6.5 patch_level9
sap business client Versi 7.0
sap business client Versi 7.0 patch_level1
sap business client Versi 7.0 patch_level2
sap business client Versi 7.0 patch_level3
sap business client Versi 7.0 patch_level4
sap business client Versi 7.0 patch_level5
sap business client Versi 7.0 patch_level6
sap business client Versi 7.0 patch_level7
sap business client Versi 7.0 patch_level8
sap business client Versi 7.0 patch_level9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.