VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 14, 2020· Updated Jun 17, 2026

CVE-2020-6304

CVE-2020-6304

Description

Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.

Affected products

28
  • SAP/Netweaver Internet Communication Manager \(kernel\)4 versions
    cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.21:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.21:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.49:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.53:*:*:*:*:*:*:*
  • SAP/Netweaver Internet Communication Manager \(krnl32nuc\)4 versions
    cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.21:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.21:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.21ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.22ext:*:*:*:*:*:*:*
  • SAP/Netweaver Internet Communication Manager \(krnl32uc\)4 versions
    cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.21:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.21:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.21ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.22ext:*:*:*:*:*:*:*
  • SAP/Netweaver Internet Communication Manager \(krnl64nuc\)5 versions
    cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.21:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.21:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.21ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.49:*:*:*:*:*:*:*
  • SAP/Netweaver Internet Communication Manager \(krnl64uc\)5 versions
    cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.21:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.21:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.21ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.49:*:*:*:*:*:*:*
  • SAP/Sap Netweaver (internet Communication Manager)llm-fuzzy
    Range: 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53
  • SAP SE/SAP NetWeaver Internet Communication Manager (KERNEL)v5
    Range: < 7.21
  • SAP SE/SAP NetWeaver Internet Communication Manager (KRNL32NUC)v5
    Range: < 7.21
  • SAP SE/SAP NetWeaver Internet Communication Manager (KRNL32UC)v5
    Range: < 7.21
  • SAP SE/SAP NetWeaver Internet Communication Manager (KRNL64NUC)v5
    Range: < 7.21
  • SAP SE/SAP NetWeaver Internet Communication Manager (KRNL64UC)v5
    Range: < 7.21

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.