CVE-2020-6310

MEDIUM

SAP NetWeaver/ABAP Platform <750-740-731-730-702 - Info Disclosure

Title source: llm

Description

Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345

Permissions Required x_refsource_misc

https://launchpad.support.sap.com/#/notes/2944988

Scores

CVSS v3 4.3

EPSS 0.0026

EPSS Percentile 49.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

Status published

Products (22)

sap/abap_platform 7.31

sap/abap_platform 7.40

sap/abap_platform 7.50

sap/abap_platform 700

sap/abap_platform 701

sap/abap_platform 702

sap/abap_platform 710

sap/abap_platform 711

sap/abap_platform 751

sap/abap_platform 753

... and 12 more

Published Aug 12, 2020

Tracked Since Feb 18, 2026