Vulnerability Description
Under certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform), versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected servers, leading to Code Injection.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Adaptive Server Enterprise | 15.7 |
Related Weaknesses (CWE)
References
- https://launchpad.support.sap.com/#/notes/2915585Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2915585Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222Vendor Advisory
FAQ
What is CVE-2020-6243?
CVE-2020-6243 is a vulnerability with a CVSS score of 8.8 (HIGH). Under certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform), versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the exten...
How severe is CVE-2020-6243?
CVE-2020-6243 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-6243?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Adaptive Server Enterprise.