CRITICAL🇵🇱 Wersja polska

CVE-2020-6203

CVSS 9.1v3.1pub. 2020-03-10upd. 2024-11-21

SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs, leading to Path Traversal.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Sap Netweaver

    APP
    Sap
    7.107.117.207.307.317.407.50
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2025-42999CRITICAL9.1⚠ KEVPL ✓same product

SAP NetWeaver Visual Composer — niebezpieczna deserializacja treści

CVE-2025-31324CRITICAL10.0⚠ KEVPL ✓same product

SAP NetWeaver: nieautoryzowany upload plików wykonywalnych w Visual Composer

CVE-2021-38163CRITICAL9.9⚠ KEVPL ✓same product

SAP NetWeaver Visual Composer — RCE przez path traversal przy uploadzie pliku

CVE-2023-36922CRITICAL9.1PL ✓same product

Command injection w SAP ECC i S/4HANA — komponent IS-OIL

CVE-2011-1517CRITICAL9.8PL ✓same product

SAP NetWeaver 7.0 — RCE i DoS przez błąd w funkcji DiagTraceHex()