CVE-2020-6215
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.
SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versiones 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, permite a un atacante redireccionar a usuarios hacia un sitio malicioso debido a una comprobación insuficiente de la URL y al robo de credenciales de la víctima, conllevando a una vulnerabilidad de Redirección de URL.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-01-08 CVE Reserved
- 2020-04-14 CVE Published
- 2024-02-17 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/174985/SAP-Application-Server-ABAP-Open-Redirection.html |
|
|
| http://seclists.org/fulldisclosure/2023/Oct/13 | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 | 2023-10-06 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 700 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "700" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 701 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "701" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 702 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "702" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 730 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "730" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 731 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "731" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 740 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "740" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 750 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "750" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 751 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "751" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 752 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "752" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 753 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "753" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Business Server Pages Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" | 754 Search vendor "Sap" for product "Netweaver As Abap Business Server Pages" and version "754" | - |
Affected
| ||||||