VYPR
← All advisories
Unrated severityNVD Advisory· Published May 12, 2020· Updated Aug 4, 2024

CVE-2020-6240

CVE-2020-6240

Description

SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service

Affected products

4
  • SAP/Netweaver Abapllm-fuzzy
    Range: SAP_UI 750, 752, 753, 754; SAP_BASIS 700, 710, 730, 731, 804
  • SAP/Web Dynpro for ABAPllm-fuzzy
    Range: See SAP_UI and SAP_BASIS versions listed above
  • SAP SE/SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_BASIS)v5
    Range: < 700
  • SAP SE/SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_UI)v5
    Range: < 750

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.