CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-07-14
SAP NetWeaver AS JAVA LM Configuration Wizard Authentication Bypass and Remote Code Execution (CVE-2020-6287, RECON)
[Affected Scope] SAP NetWeaver AS JAVA (LM Configuration Wizard) versions 7.30, 7.31, 7.40, and 7.50
[Impact] Unauthenticated remote attackers can execute configuration tasks, create administrative accounts, and fully compromise system confidentiality, integrity, and availability
[Mitigation] Apply SAP Security Note 2934135 immediately or disable/restrict access to the CTC Web Service