VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026

CVE-2020-26818

CVE-2020-26818

Description

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.

Affected products

11
  • SAP/NetWeaver Application Server for ABAP9 versions
    cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:782:*:*:*:*:*:*:*
  • SAP/Netweaver Abapllm-fuzzy
    Range: 731, 740, 750, 751, 752, 753, 754, 755, 782
  • SAP SE/SAP NetWeaver AS ABAP (Web Dynpro)v5
    Range: < 731

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.