VULNERABILITY INTELLIGENCE

CVE-2020-6177

CVSS score4.3 MEDIUM
EPSS probability0.85%
CISA KEVNot currently listed
Published2020-02-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity resolving, there is no issue of leaking content of files on the server.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references