VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026

CVE-2020-6270

CVE-2020-6270

Description

SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user leading to wrong prices.

Affected products

13
  • SAP/NetWeaver Application Server for ABAP11 versions
    cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:711:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:75a:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:75b:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:75c:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:75d:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:75e:*:*:*:*:*:*:*
  • SAP/NetWeaver AS ABAP (Banking Services)llm-fuzzy
    Range: 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E
  • SAP SE/SAP NetWeaver AS ABAP (Banking Services)v5
    Range: < 710

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.