Security Advisory

CVE-2020-6286

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-07-14 12:30:14

Last updated 2024-08-04 08:55:22

Assigner sap

CVSS score 5.3

State PUBLISHED

Description

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal.

← Browse all CVEs View on cve.org ↗