VYPR
← All advisories
Medium severity5.8NVD Advisory· Published Feb 12, 2020· Updated Jun 17, 2026

CVE-2020-6181

CVE-2020-6181

Description

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.

Affected products

13
  • SAP/Abap Platform6 versions
    cpe:2.3:a:sap:abap_platform:7.50:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:sap:abap_platform:7.50:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:7.51:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:7.52:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:7.54:*:*:*:*:*:*:*
    • (no CPE)range: 750, 751, 752, 753, 754
  • SAP/Netweaver5 versions
    cpe:2.3:a:sap:netweaver:7.02:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:netweaver:7.02:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*
    • (no CPE)range: 702, 730, 731, 740
  • SAP SE/SAP ABAP Platform (SAP Basis)v5
    Range: = 7.50
  • SAP SE/SAP NetWeaver (SAP Basis)v5
    Range: = 7.02

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.