VULNERABILITY INTELLIGENCE

CVE-2020-6232

CVSS score5.3 MEDIUM

EPSS probability0.83%

CISA KEVNot currently listed

Published2020-04-14

Last modified2026-06-17

Description

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.