Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-6309

SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication checks for a web servic

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication checks for a web service allowing the attacker to send several payloads and leading to complete denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver AS JAVA (ENGINEAPI)

  • < 7.10affected

SAP SE SAP NetWeaver AS JAVA (WSRM)

  • < 7.10affected
  • < 7.11affected
  • < 7.20affected
  • < 7.30affected
  • < 7.31affected
  • < 7.40affected
  • < 7.50affected

SAP SE SAP NetWeaver AS JAVA (J2EE-FRMW)

  • < 7.10affected
  • < 7.11affected

References