CVE-2020-6304

sap netweaver internet communication manager (kernel), sap netweaver internet communication manager (krnl32nuc), sap netweaver internet communication manager (krnl32uc) +2 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-6304

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan Improper Input Validation pada sap netweaver internet communication manager (kernel), sap netweaver internet communication manager (krnl32nuc) +3 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.

Rincian

Terbit di NVD
14 Januari 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
1,5% peluang dieksploitasi; lebih tinggi dari 73,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sap netweaver internet communication manager (kernel) Versi 7.21
sap netweaver internet communication manager (kernel) Versi 7.22
sap netweaver internet communication manager (kernel) Versi 7.49
sap netweaver internet communication manager (kernel) Versi 7.53
sap netweaver internet communication manager (krnl32nuc) Versi 7.21
sap netweaver internet communication manager (krnl32nuc) Versi 7.21ext
sap netweaver internet communication manager (krnl32nuc) Versi 7.22
sap netweaver internet communication manager (krnl32nuc) Versi 7.22ext
sap netweaver internet communication manager (krnl32uc) Versi 7.21
sap netweaver internet communication manager (krnl32uc) Versi 7.21ext
sap netweaver internet communication manager (krnl32uc) Versi 7.22
sap netweaver internet communication manager (krnl32uc) Versi 7.22ext
sap netweaver internet communication manager (krnl64nuc) Versi 7.21
sap netweaver internet communication manager (krnl64nuc) Versi 7.21ext
sap netweaver internet communication manager (krnl64nuc) Versi 7.22
sap netweaver internet communication manager (krnl64nuc) Versi 7.22ext
sap netweaver internet communication manager (krnl64nuc) Versi 7.49
sap netweaver internet communication manager (krnl64uc) Versi 7.21
sap netweaver internet communication manager (krnl64uc) Versi 7.21ext
sap netweaver internet communication manager (krnl64uc) Versi 7.22
sap netweaver internet communication manager (krnl64uc) Versi 7.22ext
sap netweaver internet communication manager (krnl64uc) Versi 7.49

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.