VYPR
← All advisories
High severity8.1NVD Advisory· Published Aug 12, 2020· Updated Jun 17, 2026

CVE-2020-6301

CVE-2020-6301

Description

SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.

Affected products

11
  • SAP/Hcm Travel Management8 versions
    cpe:2.3:a:sap:hcm_travel_management:600:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sap:hcm_travel_management:600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:hcm_travel_management:602:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:hcm_travel_management:603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:hcm_travel_management:604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:hcm_travel_management:605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:hcm_travel_management:606:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:hcm_travel_management:607:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:hcm_travel_management:608:*:*:*:*:*:*:*
  • SAP/ERP (HCM Travel Management)llm-fuzzy
    Range: 600, 602, 603, 604, 605, 606, 607, 608
  • SAP/ERPllm-fuzzy
    Range: 600, 602, 603, 604, 605, 606, 607, 608
  • SAP SE/SAP ERP (HCM Travel Management)v5
    Range: < 600

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.