Vulnetix
Try Vulnetix Request Demo
CVE-2020-6281 PUBLISHED CVSS 5.800000190734863 MEDIUM

SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, and SAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability.

EPSS 0.17% · 37.5th percentile

Risk Scores

CVSS v3.0
5.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
EPSS Score
0.17%
37.5th percentile

Affected Products

VendorProductVersions
SAP SESAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS)< 7.50, < 7.10, < 7.11
SAP SESAP NetWeaver AS JAVA (IIOP service) (SERVERCORE)< 7.10, < 7.11, < 7.20

Timeline

References

Open in Interactive Console →