Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-26808

SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA(DMIS), versions - 101, 102, 103, 104, 105, allows an authenticated attacker to inject arbitrary code into function module leading to code injection that can be executed in the application which affects the confidentiality, availability and integrity of the application.

Published

2020-11-10T17:15:13.327

Last Modified

2024-11-21T05:20:19.360

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap sap_as_abap\(dmis\) 2011_1_620 Yes
Application sap sap_as_abap\(dmis\) 2011_1_640 Yes
Application sap sap_as_abap\(dmis\) 2011_1_700 Yes
Application sap sap_as_abap\(dmis\) 2011_1_710 Yes
Application sap sap_as_abap\(dmis\) 2011_1_730 Yes
Application sap sap_as_abap\(dmis\) 2011_1_731 Yes
Application sap sap_as_abap\(dmis\) 2011_1_752 Yes
Application sap sap_as_abap\(dmis\) 2020 Yes
Application sap sap_s4_hana\(dmis\) 101 Yes
Application sap sap_s4_hana\(dmis\) 102 Yes
Application sap sap_s4_hana\(dmis\) 103 Yes
Application sap sap_s4_hana\(dmis\) 104 Yes
Application sap sap_s4_hana\(dmis\) 105 Yes
References