Sap Netweaver Compare Systems vulnerabilities

1 known vulnerability affecting sap/netweaver_compare_systems.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2020-6366MEDIUMCVSS 6.5v7.20v7.30+3 more2020-10-20
CVE-2020-6366 [MEDIUM] CWE-20 CVE-2020-6366: SAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate up SAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate uploaded XML documents. An attacker with administrative privileges can retrieve arbitrary files including files on OS level from the server and/or can execute a denial-of-service.
nvd