Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-6304

Опубликовано: 14 янв. 2020
Источник: nvd
CVSS3: 5.9
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.21:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.22:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.49:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(kernel\):7.53:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.21:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.21ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.22:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32nuc\):7.22ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.21:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.21ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.22:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl32uc\):7.22ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.21:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.21ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.22:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.22ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64nuc\):7.49:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.21:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.21ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.22:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.22ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_internet_communication_manager_\(krnl64uc\):7.49:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00697
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

github
больше 3 лет назад

Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.

CVSS3: 5.9
fstec
около 6 лет назад

Уязвимость сервера веб-приложений SAP NetWeaver Internet Communication Manager, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 71%
0.00697
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20