VYPR
← All advisories
High severity7.5NVD Advisory· Published May 12, 2020· Updated Jun 17, 2026

CVE-2020-6240

CVE-2020-6240

Description

SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service

Affected products

13
  • SAP/NetWeaver Application Server for ABAP9 versions
    cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:804:*:*:*:*:*:*:*
  • SAP/Netweaver Abapllm-fuzzy
  • SAP/Web Dynpro for ABAPllm-fuzzy
  • SAP SE/SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_BASIS)v5
    Range: < 700
  • SAP SE/SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_UI)v5
    Range: < 750

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.