Skip to main content

Marketing CVE-2020-6320

HIGH
2020-09-09 cna@sap.com
SAP Information Disclosure Marketing
8.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.1 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 09, 2020 - 13:15 nvd
HIGH 8.1

DescriptionNVD

SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted. Limited knowledge of payload is required for an attacker to exploit the vulnerability and perform tasks related to contact and interaction data which impacts Confidentiality and Integrity of data in the application.

AnalysisAI

SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted. Limited knowledge of payload is required for an attacker to exploit the vulnerability and perform tasks related to contact and interaction data which impacts Confidentiality and Integrity of data in the application. Affected products include: Sap Marketing.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Marketing

View all
CVE-2021-2355 CRITICAL
9.1 Jul 21

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Rated cr
CVE-2021-2205 CRITICAL
9.1 Apr 22

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Rated cr
CVE-2020-14875 CRITICAL
9.1 Oct 21

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Rated cr
CVE-2020-14658 CRITICAL
9.1 Jul 15

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Rated cr
CVE-2017-10171 HIGH
8.2 Aug 08

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Home Page). Rated high severit
CVE-2017-3334 HIGH
8.2 Jan 27

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Rated high se
CVE-2017-3358 HIGH
8.2 Jan 27

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Rated high se
CVE-2017-3357 HIGH
8.2 Jan 27

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Rated high se
CVE-2017-3354 HIGH
8.2 Jan 27

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Rated high se
CVE-2017-3353 HIGH
8.2 Jan 27

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Rated high se
CVE-2017-3352 HIGH
8.2 Jan 27

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Rated high se
CVE-2017-3351 HIGH
8.2 Jan 27

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Rated high se

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2020-6320 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy