VDB

CVE-2020-26832

CVE-2020-26832 PUBLISHED CVSS 7.599999904632568 HIGH

SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should be restricted, however due to missing authorization an attacker can get access to some sensitive internal information of vulnerable SAP system or to make vulnerable SAP systems completely unavailable.

EPSS 0.49% · 66.2th percentile

Risk Scores

CVSS 3.0
7.599999904632568
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
EPSS Score
0.49%
66.2th percentile

Affected Products

VendorProductVersions
saps\/4_hana101, 103, 104
SAP SESAP NetWeaver AS ABAP (SAP Landscape Transformation)*, < 2011_1_620, < 2011_1_640
sapnetweaver_application_server_abap2020, 2011_1_700, 2011_1_710
SAP SESAP S4 HANA (SAP Landscape Transformation)< 103, < 104, < 105

Exploit Intelligence

Timeline

  • Dec 8, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›