CVE-2020-6206
Last modified
CVE-2020-6206 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Cloud Platform Integration | 1.0 |
References
- https://launchpad.support.sap.com/#/notes/2859004Permissions Required
- https://launchpad.support.sap.com/#/notes/2859004Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-6206?
How severe is CVE-2020-6206?
How do I fix CVE-2020-6206?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-6200The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, …5.4
- CVE-2020-6201The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 18…6.1
- CVE-2020-6202SAP NetWeaver Application Server Java (User Management Engin…7.2
- CVE-2020-6203SAP NetWeaver UDDI Server (Services Registry), versions- 7.1…9.1
- CVE-2020-6204The selection query in SAP Treasury and Risk Management (Tra…4.3
- CVE-2020-6205SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), S…6.1
- CVE-2020-6207SAP Solution Manager (User Experience Monitoring), version- …9.8
- CVE-2020-6208SAP Business Objects Business Intelligence Platform (Crystal…8.2
- CVE-2020-6209SAP Disclosure Management, version 10.1, does not perform ne…7.5
- CVE-2020-6210SAP Fiori Launchpad, versions- 753, 754, does not sufficient…6.1
- CVE-2020-6211SAP Business Objects Business Intelligence Platform (AdminTo…6.1
- CVE-2020-6212Egypt localized withholding tax reports Clearing of Liabilit…5.4
Are you affected by CVE-2020-6206?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST