Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-6249

EPSS 0.40% · P61
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-6249

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SAP Master Data Governance SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP Master Data Governance是德国思爱普（SAP）公司的一套用于维护、验证和分发主数据的数据管理工具。 SAP Master Data Governance中存在SQL注入漏洞。攻击者可通过执行特制的数据库查询语句利用该漏洞获取后端数据库信息。以下产品及版本受到影响：SAP Master Data Governance S4CORE 101版本，S4FND 102版本、103版本、104版本，SAP_BS_FND 748版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
SAP SESAP Master Data Governance (S4CORE) < 101 -
SAP SESAP Master Data Governance (S4FND) < 102 -
SAP SESAP Master Data Governance (SAP_BS_FND) < 748 -

II. Public POCs for CVE-2020-6249

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-6249

请登录查看更多情报信息。

Same Patch Batch · SAP SE · 2020-05-12 · 19 CVEs total

CVE-2020-6257SAP Business Objects Business Intelligence Platform 跨站脚本漏洞
CVE-2020-6242SAP Business Objects Business Intelligence Platform 访问控制错误漏洞
CVE-2020-6258SAP Identity Management 安全漏洞
CVE-2020-6254SAP Enterprise Threat Detection 跨站脚本漏洞
CVE-2020-6241SAP Adaptive Server Enterprise SQL注入漏洞
CVE-2020-6259SAP Adaptive Server Enterprise 安全漏洞
CVE-2020-6252SAP Adaptive Server Enterprise 信息泄露漏洞
CVE-2020-6253SAP Adaptive Server Enterprise SQL注入漏洞
CVE-2020-6244SAP Business Client 代码问题漏洞
CVE-2020-6240思爱普 SAP NetWeaver AS ABAP Business Server 输入验证错误漏洞
CVE-2020-6250SAP Adaptive Server Enterprise 信息泄露漏洞
CVE-2020-6262思爱普 SAP AS ABAP 注入漏洞
CVE-2020-6256SAP Master Data Governance 安全漏洞
CVE-2020-6248SAP Adaptive Server Enterprise 输入验证错误漏洞
CVE-2020-6251SAP Business Objects Business Intelligence Platform 信息泄露漏洞
CVE-2020-6247SAP Business Objects Business Intelligence Platform 输入验证错误漏洞
CVE-2020-6245SAP Business Objects Business Intelligence Platform 注入漏洞
CVE-2020-6243SAP Adaptive Server Enterprise 注入漏洞

IV. Related Vulnerabilities

Same vendor: SAP SE

V. Comments for CVE-2020-6249

No comments yet

Leave a comment