CVE-2020-6371

Description

User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.197

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 731	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 740	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 710	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 730	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 711	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 710	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 711	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 730	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234