VYPR
← All advisories
High severity7.2NVD Advisory· Published May 12, 2020· Updated Jun 17, 2026

CVE-2020-6253

CVE-2020-6253

Description

Under certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL Injection.

Affected products

4
  • SAP/Adaptive Server Enterprise3 versions
    cpe:2.3:a:sap:adaptive_server_enterprise:15.7:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:adaptive_server_enterprise:15.7:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:adaptive_server_enterprise:16.0:*:*:*:*:*:*:*
    • (no CPE)range: 15.7, 16.0
  • SAP SE/SAP Adaptive Server Enterprise (Web Services)v5
    Range: < 15.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.