2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6210 | MEDIUM | 6.1 | 0.7% | Mar 10, 2020 | SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the att... |
| CVE-2020-6209 | HIGH | 7.5 | 0.8% | Mar 10, 2020 | SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allo... |
| CVE-2020-6208 | HIGH | 8.2 | 1.1% | Mar 10, 2020 | SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic... |
| CVE-2020-6207 | CRITICAL | 9.8 | 98.4% | Mar 10, 2020 | SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an... |
| CVE-2020-6206 | MEDIUM | 4.3 | 0.4% | Mar 10, 2020 | SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning ma... |
| CVE-2020-6205 | MEDIUM | 6.1 | 0.7% | Mar 10, 2020 | SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31,... |
| CVE-2020-6204 | MEDIUM | 4.3 | 0.6% | Mar 10, 2020 | The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605... |
| CVE-2020-6203 | CRITICAL | 9.1 | 1.9% | Mar 10, 2020 | SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to... |
| CVE-2020-6202 | HIGH | 7.2 | 1.1% | Mar 10, 2020 | SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; does... |
| CVE-2020-6201 | MEDIUM | 6.1 | 0.8% | Mar 10, 2020 | The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlled... |
| CVE-2020-6200 | MEDIUM | 5.4 | 0.5% | Mar 10, 2020 | The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template ... |
| CVE-2020-6199 | MEDIUM | 5.4 | 0.3% | Mar 10, 2020 | The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and ... |
| CVE-2020-6198 | CRITICAL | 9.8 | 1.4% | Mar 10, 2020 | SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This... |
| CVE-2020-6197 | LOW | 3.3 | 0.6% | Mar 10, 2020 | SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Exp... |
| CVE-2020-6196 | HIGH | 7.5 | 1.4% | Mar 10, 2020 | SAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to generate multiple requests, using which... |
| CVE-2020-6178 | MEDIUM | 5.4 | 0.7% | Mar 10, 2020 | SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser his... |
| CVE-2020-10372 | MEDIUM | 5.4 | 0.6% | Mar 10, 2020 | Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the... |
| CVE-2020-0087 | MEDIUM | 5.5 | 0.1% | Mar 10, 2020 | In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lea... |
| CVE-2020-0085 | HIGH | 7.8 | 0.1% | Mar 10, 2020 | In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. Th... |
| CVE-2020-0084 | HIGH | 7.8 | 0.1% | Mar 10, 2020 | In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local e... |
| CVE-2020-0066 | MEDIUM | 6.4 | 0.1% | Mar 10, 2020 | In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalat... |
| CVE-2020-0063 | HIGH | 7.3 | 0.2% | Mar 10, 2020 | In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local esca... |
| CVE-2020-0062 | HIGH | 7.5 | 0.6% | Mar 10, 2020 | In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote info... |
| CVE-2020-0057 | MEDIUM | 5.5 | 0.2% | Mar 10, 2020 | In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This cou... |
| CVE-2020-0056 | MEDIUM | 5.5 | 0.2% | Mar 10, 2020 | In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. Th... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now