VYPR
← All advisories
High severity8.8NVD Advisory· Published May 12, 2020· Updated Jun 17, 2026

CVE-2020-6249

CVE-2020-6249

Description

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection.

Affected products

9
  • SAP/Master Data Governance \(s4core\)
    cpe:2.3:a:sap:master_data_governance_\(s4core\):101:*:*:*:*:*:*:*
  • SAP/Master Data Governance \(s4fnd\)3 versions
    cpe:2.3:a:sap:master_data_governance_\(s4fnd\):102:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:master_data_governance_\(s4fnd\):102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_\(s4fnd\):103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_\(s4fnd\):104:*:*:*:*:*:*:*
  • SAP/Master Data Governance \(sap Bs Fnd\)
    cpe:2.3:a:sap:master_data_governance_\(sap_bs_fnd\):748:*:*:*:*:*:*:*
  • SAP/Master Data Governancellm-fuzzy
  • SAP SE/SAP Master Data Governance (S4CORE)v5
    Range: < 101
  • SAP SE/SAP Master Data Governance (S4FND)v5
    Range: < 102
  • SAP SE/SAP Master Data Governance (SAP_BS_FND)v5
    Range: < 748

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.