VULNERABILITY INTELLIGENCE

CVE-2020-6224

CVSS score6.2 MEDIUM
EPSS probability1.09%
CISA KEVNot currently listed
Published2020-04-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

Description

SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure.

Weakness classification

  • nvd@nist.gov: CWE-532

Primary references