Medium severity4.9NVD Advisory· Published Feb 12, 2020· Updated Jun 17, 2026
CVE-2020-6187
CVE-2020-6187
Description
SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service.
Affected products
9cpe:2.3:a:sap:netweaver_guided_procedures:7.10:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:sap:netweaver_guided_procedures:7.10:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_guided_procedures:7.11:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_guided_procedures:7.20:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_guided_procedures:7.30:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_guided_procedures:7.31:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_guided_procedures:7.40:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_guided_procedures:7.50:*:*:*:*:*:*:*
- (no CPE)range: 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50
- SAP SE/SAP NetWeaver (Guided Procedures)v5Range: = 7.10
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
News mentions
0No linked articles in our index yet.