Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.6
CVSSv3

CVE-2020-26832

Published: 09/12/2020 Updated: 05/10/2022
CVSS v2 Base Score: 7.5 | Impact Score: 7.8 | Exploitability Score: 8
CVSS v3 Base Score: 7.6 | Impact Score: 4.7 | Exploitability Score: 2.3
VMScore: 668
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:C
Subscribe to S\/4 Hana

Vulnerability Summary

SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should be restricted, however due to missing authorization an attacker can get access to some sensitive internal information of vulnerable SAP system or to make vulnerable SAP systems completely unavailable.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap s\\/4 hana 102

sap s\\/4 hana 103

sap s\\/4 hana 104

sap s\\/4 hana 105

sap s\\/4 hana 101

sap netweaver application server abap 2011_1_640

sap netweaver application server abap 2011_1_700

sap netweaver application server abap 2011_1_710

sap netweaver application server abap 2011_1_730

sap netweaver application server abap 2011_1_731

sap netweaver application server abap 2011_1_752

sap netweaver application server abap 2020

sap netweaver application server abap 2011_1_620

Exploits

Exploit DB: SAP Application Server ABAP / ABAP Platform Code Injection / SQL Injection / Missing Authorization
The SAP application server ABAP and ABAP Platform are susceptible to code injection, SQL injection, and missing authorization vulnerabilities Multiple SAP products are affected ...

References

CWE-862https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079https://launchpad.support.sap.com/#/notes/2993132http://seclists.org/fulldisclosure/2022/May/42http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.htmlhttps://nvd.nist.govhttps://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4651CVE-2024-34255elevation of privilegeCVE-2024-25529CVE-2024-4671NULL pointer dereferenceCVE-2024-25527template injectionCVE-2008-0166
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook