CVE-2020-26808

Risk Scores

Exploit Intelligence

• http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html (nist-nvd)
• http://seclists.org/fulldisclosure/2022/May/42 (nist-nvd)

Timeline

• Nov 10, 2020 CVE Published
• Apr 14, 2021 EPSS Score
• Aug 24, 2021 EPSS Score
• Oct 26, 2021 EPSS Score
• Jan 6, 2022 EPSS Score
• Feb 4, 2022 EPSS Score
• Apr 1, 2022 EPSS Score
• May 1, 2022 EPSS Score
• Sep 4, 2022 EPSS Score
• Nov 6, 2022 EPSS Score
• Mar 7, 2023 EPSS Score
• Mar 11, 2023 EPSS Score

References

• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 advisory