CVE Feed

    Dashboard / CVE / CVE-2020-6307

    CVE-2020-6307

    Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.

    Published:Jan 14, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 14, 2020
    EPSS Score:0.00236
    CVSS Score:4.3

    Affected Products

    Vendor
    Sap
    Product
    Basis

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-34320 (CVSS 9.3) — BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canon…
    CVE-2023-29110 (CVSS 3.7) — The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755…
    CVE-2023-29109 (CVSS 4.4) — The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASI…
    CVE-2022-41264 (CVSS 8.8) — Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 7…
    CVE-2019-0248 (CVSS 5.9) — Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP…
    CVE-2018-2478 (CVSS 7.2) — An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High