VDB
CVE-2020-6252
CVE-2020-6252
PUBLISHED
CVSS 9 CRITICAL
Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.
EPSS 0.16% · 36.4th percentile
Risk Scores
CVSS 3.0
9
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.16%
36.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP Adaptive Server Enterprise (Cockpit) | < 16.0 |
| sap | adaptive_server_enterprise_cockpit | 16.0 |
Exploit Intelligence
Timeline
- May 12, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score