SAP Security Patch Day — August 2020
Tuesday, 11 August 2020
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 1
All vulnerabilities 13
Critical1 ShowHide
High6 ShowHide
-
High 8.5
CVE-2020-6294 Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionaliti…EPSS 1.5%
-
High 8.3
CVE-2020-6296 SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to inject code that ca…EPSS 1.3%
- High 8.3
-
High 7.5
CVE-2020-6309 SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication ch…EPSS 1.8%
- High 7.3
- High 7.0
Medium6 ShowHide
- Medium 6.3
- Medium 5.4
- Medium 4.8
- Medium 4.3
- Medium 4.3
- Medium 4.3