CyberSec.Space Logo
Back to CVE Browser

CVE-2020-6287

🔥 Known Exploited (CISA KEV)CRITICAL
10.0
CVSS Severity Score
EPSS Score96.9890%
EPSS Percentile87.69th
Published2020-07-14
Last Modified2025-10-31
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check.

Affected Platforms (CPE)

📦
Sap

Netweaver Application Server Java

= 7.30= 7.31= 7.40= 7.50

References & Advisories

🔗 http://packetstormsecurity.com/files/162085/SAP-JAVA-Configuration-Task-Execution.html
🔗 http://seclists.org/fulldisclosure/2021/Apr/6
🔗 https://launchpad.support.sap.com/#/notes/2934135
🔗 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675
🔗 https://www.onapsis.com/recon-sap-cyber-security-vulnerability
🔗 http://packetstormsecurity.com/files/162085/SAP-JAVA-Configuration-Task-Execution.html
🔗 http://seclists.org/fulldisclosure/2021/Apr/6
🔗 https://launchpad.support.sap.com/#/notes/2934135

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 20, 2026

Technical analysis of zero-day exploit chains against SonicWall SMA1000 appliances (UTA0533), NGINX regular expression heap corruption vulnerabilities (CVE-2026-42533), and Sandworm's (UAC-0145) ClickFix fake CAPTCHA campaigns.

2026-07-20

Related Vulnerabilities

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-542496.8

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 t...

CVE-2026-50782

Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_manager_getUserl...

CVE-2026-466786.8

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an applic...

CVE-2020-6287 Detail & Impact Analysis | CVSS 10.0 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space