Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-6181

Опубликовано: 12 фев. 2020
Источник: nvd
CVSS3: 5.8
CVSS3: 5.8
CVSS2: 5
EPSS Низкий

Описание

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:abap_platform:7.50:*:*:*:*:*:*:*
cpe:2.3:a:sap:abap_platform:7.51:*:*:*:*:*:*:*
cpe:2.3:a:sap:abap_platform:7.52:*:*:*:*:*:*:*
cpe:2.3:a:sap:abap_platform:7.53:*:*:*:*:*:*:*
cpe:2.3:a:sap:abap_platform:7.54:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver:7.02:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*

EPSS

Процентиль: 53%
0.00305
Низкий

5.8 Medium

CVSS3

5.8 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github логотип

GHSA-h7pq-vvp4-rh72

github
больше 3 лет назад

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.

EPSS

Процентиль: 53%
0.00305
Низкий

5.8 Medium

CVSS3

5.8 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-Other