Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 48 of 215.
- CVE-2020-6338 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2020-6337 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-6336 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-6335 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-6334 Use after free in SAP 3D Visual Enterprise Viewer
- CVE-2020-6333 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2020-6332 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2020-6331 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-6330 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-6329 Use after free in SAP 3D Visual Enterprise Viewer
- CVE-2020-6328 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-6327 Integer overflow in SAP 3D Visual Enterprise Viewer
- CVE-2020-6326 Cross-site scripting in SAP NetWeaver (Knowledge Management)
- CVE-2020-6324 Cross-site scripting in SAP NetWeaver AS ABAP (BSP Test Application)
- CVE-2020-6323 Cross-site scripting in SAP NetWeaver Enterprise Portal (Fiori Framework Page)
- CVE-2020-6322 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-6321 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2020-6320 Missing authorization in SAP Marketing (Mobile Channel Servlet)
- CVE-2020-6319 Cross-site scripting in SAP NetWeaver Application Server Java
- CVE-2020-6318 Code injection in SAP NetWeaver (ABAP Server) and ABAP Platform
- CVE-2020-6317 Information disclosure in SAP Adaptive Server Enterprise
- CVE-2020-6316 Missing authorization in SAP ERP
- CVE-2020-6315 Information disclosure in SAP 3D Visual Enterprise Viewer
- CVE-2020-6314 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2020-6313 Cross-site scripting in SAP NetWeaver AS JAVA (XML Forms)
- CVE-2020-6312 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
- CVE-2020-6311 Missing authorization in BANKING SERVICES FROM SAP 9.0(Bank Analyzer)
- CVE-2020-6310 Missing authorization in SAP NetWeaver (ABAP Server) and ABAP Platform
- CVE-2020-6309 Missing authorization in SAP NetWeaver AS JAVA (ENGINEAPI)
- CVE-2020-6308 Server-side request forgery in SAP BusinessObjects Business Intelligence Platform (Web Services)
- CVE-2020-6307 Missing authorization in Automated Note Search Tool (SAP Basis)
- CVE-2020-6306 Missing authorization in SAP Leasing (EA Appl)
- CVE-2020-6305 Cross-site scripting in SAP Process Integration - Rest Adapter (SAP XIAF)
- CVE-2020-6304 Denial of service in SAP NetWeaver Internet Communication Manager (KERNEL)
- CVE-2020-6303 Cross-site scripting in SAP Disclosure Management
- CVE-2020-6302 Information disclosure in SAP Commerce
- CVE-2020-6301 Missing authorization in SAP ERP (HCM Travel Management)
- CVE-2020-6300 Cross-site scripting in SAP Business Objects Business Intelligence Platform (Central Management Console)
- CVE-2020-6299 Information disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform
- CVE-2020-6298 Missing authorization in SAP Banking Services (Generic Market Data)
- CVE-2020-6297 Information disclosure in SAP Data Intelligence
- CVE-2020-6296 Code injection in SAP NetWeaver (ABAP Server) and ABAP Platform
- CVE-2020-6295 Information disclosure in SAP Adaptive Server Enterprise
- CVE-2020-6294 Auth bypass in SAP Business Objects Business Intelligence Platform
- CVE-2020-6293 File upload in SAP NetWeaver (Knowledge Management)
- CVE-2020-6292 Auth bypass in SAP Disclosure Management
- CVE-2020-6291 Auth bypass in SAP Disclosure Management
- CVE-2020-6290 Auth bypass in SAP Disclosure Management
- CVE-2020-6289 Cross-site request forgery in SAP Disclosure Management
- CVE-2020-6288 File upload in SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface)
- CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function
- CVE-2020-6286 Path traversal in SAP NetWeaver AS JAVA (LM Configuration Wizard)
- CVE-2020-6285 Information disclosure in SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI)
- CVE-2020-6284 Cross-site scripting in SAP NetWeaver (Knowledge Management)
- CVE-2020-6283 Cross-site scripting in SAP Fiori(Launchpad)
- CVE-2020-6282 Server-side request forgery in SAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS)
- CVE-2020-6281 Cross-site scripting in SAP Business Objects Business Intelligence Platform (BI Launchpad)
- CVE-2020-6280 Information disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform
- CVE-2020-6278 Cross-site scripting in SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC)
- CVE-2020-6276 Cross-site scripting in SAP Business Objects Business Intelligence Platform (bipodata)
- CVE-2020-6275 Server-side request forgery in SAP Netweaver AS ABAP
- CVE-2020-6273 Missing authorization in SAP S/4 HANA (Fiori UI for General Ledger Accounting)
- CVE-2020-6272 Cross-site scripting in SAP Commerce Cloud
- CVE-2020-6271 Missing authorization in SAP Solution Manager (Problem Context Manager)
- CVE-2020-6270 Missing authorization in SAP NetWeaver AS ABAP (Banking Services)
- CVE-2020-6269 Information disclosure in SAP Business Objects Business Intelligence Platform
- CVE-2020-6268 Missing authorization in SAP ERP (Statutory Reporting for Insurance Companies)
- CVE-2020-6267 Misconfiguration in SAP Disclosure Management
- CVE-2020-6266 Open redirect in SAP Fiori for SAP S/4HANA
- CVE-2020-6265 Hardcoded credentials in SAP Commerce
- CVE-2020-6264 Information disclosure in SAP Commerce
- CVE-2020-6263 Auth bypass in SAP NetWeaver AS JAVA
- CVE-2020-6262 Code injection in SAP Application Server ABAP (ST-PI)
- CVE-2020-6261 Other in SAP Solution Manager (Trace Analysis)
- CVE-2020-6260 Other in SAP Solution Manager (Trace Analysis)
- CVE-2020-6259 Missing authorization in SAP Adaptive Server Enterprise
- CVE-2020-6258 Missing authorization in SAP Identity Management
- CVE-2020-6257 Cross-site scripting in SAP Business Objects Business Intelligence Platform (CMC and BI launchpad)
- CVE-2020-6256 Missing authorization in SAP Master Data Governance
- CVE-2020-6254 Cross-site scripting in SAP Enterprise Threat Detection
- CVE-2020-6253 SQL injection in SAP Adaptive Server Enterprise (Web Services)
- CVE-2020-6252 Information disclosure in SAP Adaptive Server Enterprise (Cockpit)
- CVE-2020-6251 Information disclosure in SAP BusinessObjects Business Intelligence Platform
- CVE-2020-6250 Information disclosure in SAP Adaptive Server Enterprise
- CVE-2020-6249 SQL injection in SAP Master Data Governance (S4CORE)
- CVE-2020-6248 Code injection in SAP Adaptive Server Enterprise (Backup Server)
- CVE-2020-6247 Denial of service in SAP Business Objects Business Intelligence Platform
- CVE-2020-6246 Cross-site scripting in SAP NetWeaver AS ABAP (Business Server Pages Test Application SBSPEXT TABLE)
- CVE-2020-6245 Code injection in SAP Business Objects Business Intelligence Platform
- CVE-2020-6244 Other in SAP Business Client
- CVE-2020-6243 Code injection in SAP Adaptive Server Enterprise (XP Server on Windows Platform)
- CVE-2020-6242 Auth bypass in SAP Business Objects Business Intelligence Platform (Live Data Connect)
- CVE-2020-6241 SQL injection in SAP Adaptive Server Enterprise
- CVE-2020-6240 Denial of service in SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP BASIS)
- CVE-2020-6239 Information disclosure in SAP Business One (Backup service)
- CVE-2020-6238 XML external entity in SAP Commerce
- CVE-2020-6237 Information disclosure in SAP Business Objects Business Intelligence Platform
- CVE-2020-6236 Privilege escalation in SAP Adaptive Extensions
- CVE-2020-6235 Auth bypass in SAP Solution Manager (Diagnostics Agent)
- CVE-2020-6234 Privilege escalation in SAP Host Agent