2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10042 | CRITICAL | 9.8 | 1.9% | Jul 14, 2020 | A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions... |
| CVE-2020-10041 | MEDIUM | 6.1 | 0.8% | Jul 14, 2020 | A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions... |
| CVE-2020-10040 | MEDIUM | 5.5 | 0.2% | Jul 14, 2020 | A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions... |
| CVE-2020-10039 | HIGH | 8.1 | 0.5% | Jul 14, 2020 | A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions... |
| CVE-2020-10038 | CRITICAL | 9.8 | 1.2% | Jul 14, 2020 | A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions... |
| CVE-2020-10037 | HIGH | 7.5 | 1.1% | Jul 14, 2020 | A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions... |
| CVE-2020-6292 | HIGH | 8.8 | 0.6% | Jul 14, 2020 | Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to ... |
| CVE-2020-6291 | HIGH | 8.8 | 0.6% | Jul 14, 2020 | SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited ... |
| CVE-2020-6290 | MEDIUM | 6.3 | 0.6% | Jul 14, 2020 | SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user ... |
| CVE-2020-6289 | HIGH | 8.8 | 0.4% | Jul 14, 2020 | SAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request Forgery, which could be ... |
| CVE-2020-6287 | CRITICAL | 10 | 94.7% | Jul 14, 2020 | SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c... |
| CVE-2020-6286 | MEDIUM | 5.3 | 28.3% | Jul 14, 2020 | The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuratio... |
| CVE-2020-6285 | MEDIUM | 6.5 | 1.1% | Jul 14, 2020 | SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain con... |
| CVE-2020-6282 | MEDIUM | 5.8 | 1.1% | Jul 14, 2020 | SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, and SAP NetWeaver ... |
| CVE-2020-6281 | MEDIUM | 6.1 | 0.8% | Jul 14, 2020 | SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-contr... |
| CVE-2020-6280 | LOW | 2.7 | 0.9% | Jul 14, 2020 | SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to acces... |
| CVE-2020-6278 | MEDIUM | 5.4 | 0.5% | Jul 14, 2020 | SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC), versions 4.1, 4.2, allows to an attacker to ... |
| CVE-2020-6276 | MEDIUM | 6.1 | 0.7% | Jul 14, 2020 | SAP Business Objects Business Intelligence Platform (bipodata), version 4.2, does not sufficiently encode user-controlle... |
| CVE-2020-6267 | MEDIUM | 5.4 | 0.8% | Jul 14, 2020 | Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cooki... |
| CVE-2020-4513 | MEDIUM | 6.1 | 0.7% | Jul 14, 2020 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2020-4512 | HIGH | 7.2 | 2.0% | Jul 14, 2020 | IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands. |
| CVE-2020-4511 | MEDIUM | 6.5 | 1.1% | Jul 14, 2020 | IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sendi... |
| CVE-2020-4510 | MEDIUM | 5.5 | 2.0% | Jul 14, 2020 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A r... |
| CVE-2020-4364 | MEDIUM | 5.4 | 0.6% | Jul 14, 2020 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2020-15711 | HIGH | 8.8 | 0.5% | Jul 14, 2020 | In MISP before 2.4.129, setting a favourite homepage was not CSRF protected. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now