Vulnetix
Try Vulnetix Request Demo
CVE-2020-6249 PUBLISHED CVSS 7.699999809265137 HIGH

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection.

EPSS 0.40% · 60.5th percentile

Risk Scores

CVSS v3.0
7.699999809265137
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.40%
60.5th percentile

Affected Products

VendorProductVersions
SAP SESAP Master Data Governance (S4FND)< 104, < 102, < 103
sapmaster_data_governance_\(s4fnd\)104, 102, 103
SAP SESAP Master Data Governance (S4CORE)< 101
SAP SESAP Master Data Governance (SAP_BS_FND)< 748
sapmaster_data_governance_\(s4core\)101
sapmaster_data_governance_\(sap_bs_fnd\)748

Timeline

References

Open in Interactive Console →