2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11057 | HIGH | 8.8 | 2.2% | May 12, 2020 | In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute py... |
| CVE-2020-12772 | HIGH | 8.8 | 1.7% | May 12, 2020 | An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. A chat message can inclu... |
| CVE-2020-11062 | MEDIUM | 5.4 | 0.5% | May 12, 2020 | In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type... |
| CVE-2020-11060 | HIGH | 8.8 | 10.9% | May 12, 2020 | In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this v... |
| CVE-2020-12826 | MEDIUM | 5.3 | 0.7% | May 12, 2020 | A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in ... |
| CVE-2020-6262 | HIGH | 8.8 | 1.2% | May 12, 2020 | Service Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_... |
| CVE-2020-6259 | MEDIUM | 6.5 | 0.8% | May 12, 2020 | Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information w... |
| CVE-2020-6258 | MEDIUM | 6.5 | 0.7% | May 12, 2020 | SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowin... |
| CVE-2020-6257 | MEDIUM | 5.4 | 0.5% | May 12, 2020 | SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not sufficiently encode user-control... |
| CVE-2020-6256 | MEDIUM | 4.3 | 0.6% | May 12, 2020 | SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change ... |
| CVE-2020-6254 | MEDIUM | 6.1 | 0.7% | May 12, 2020 | SAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response pages in case of errors,... |
| CVE-2020-6253 | HIGH | 7.2 | 1.2% | May 12, 2020 | Under certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0, allows an authenticated us... |
| CVE-2020-6252 | HIGH | 8 | 0.5% | May 12, 2020 | Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local... |
| CVE-2020-6251 | MEDIUM | 6.5 | 0.8% | May 12, 2020 | Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an ... |
| CVE-2020-6250 | MEDIUM | 6.8 | 0.5% | May 12, 2020 | SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoint... |
| CVE-2020-6249 | HIGH | 8.8 | 1.0% | May 12, 2020 | The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS... |
| CVE-2020-6248 | HIGH | 7.2 | 1.9% | May 12, 2020 | SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an au... |
| CVE-2020-6247 | HIGH | 7.5 | 1.0% | May 12, 2020 | SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitima... |
| CVE-2020-6245 | MEDIUM | 6.7 | 0.3% | May 12, 2020 | SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to i... |
| CVE-2020-6244 | HIGH | 7.8 | 0.3% | May 12, 2020 | SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious co... |
| CVE-2020-6243 | HIGH | 8.8 | 0.9% | May 12, 2020 | Under certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform), versions 15.7, 16.0, does not ... |
| CVE-2020-6242 | CRITICAL | 9.8 | 0.8% | May 12, 2020 | SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an att... |
| CVE-2020-6241 | HIGH | 8.8 | 1.0% | May 12, 2020 | SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevat... |
| CVE-2020-6240 | HIGH | 7.5 | 1.4% | May 12, 2020 | SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allo... |
| CVE-2020-1746 | MEDIUM | 5 | 0.4% | May 12, 2020 | A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now