VYPR
Medium severity4.4NVD Advisory· Published Aug 12, 2020· Updated Jun 17, 2026

CVE-2020-6297

CVE-2020-6297

Description

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure.

Affected products

4
  • cpe:2.3:a:sap:data_intelligence:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:data_intelligence:3.0:*:*:*:*:*:*:*
    • (no CPE)range: =3.0
  • SAP/Data Hubllm-fuzzy
    Range: <=2.7
  • SAP SE/SAP Data Intelligencev5
    Range: < 3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.