VULNERABILITY INTELLIGENCE
CVE-2020-6252
CVSS score8 HIGH
EPSS probability0.52%
CISA KEVNot currently listed
Published2020-05-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- cna@sap.com — Permissions Required
- cna@sap.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory