# Vulnerabilities published in 2020


- [CVE-2020-6338](https://insights.sbomify.com/CVE-2020-6338/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6337](https://insights.sbomify.com/CVE-2020-6337/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6336](https://insights.sbomify.com/CVE-2020-6336/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6335](https://insights.sbomify.com/CVE-2020-6335/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6334](https://insights.sbomify.com/CVE-2020-6334/): Use after free in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6333](https://insights.sbomify.com/CVE-2020-6333/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6332](https://insights.sbomify.com/CVE-2020-6332/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6331](https://insights.sbomify.com/CVE-2020-6331/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6330](https://insights.sbomify.com/CVE-2020-6330/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6329](https://insights.sbomify.com/CVE-2020-6329/): Use after free in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6328](https://insights.sbomify.com/CVE-2020-6328/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6327](https://insights.sbomify.com/CVE-2020-6327/): Integer overflow in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6326](https://insights.sbomify.com/CVE-2020-6326/): Cross-site scripting in SAP NetWeaver (Knowledge Management) (medium 5.4)
- [CVE-2020-6324](https://insights.sbomify.com/CVE-2020-6324/): Cross-site scripting in SAP NetWeaver AS ABAP (BSP Test Application) (medium 6.1)
- [CVE-2020-6323](https://insights.sbomify.com/CVE-2020-6323/): Cross-site scripting in SAP NetWeaver Enterprise Portal (Fiori Framework Page) (medium 6.1)
- [CVE-2020-6322](https://insights.sbomify.com/CVE-2020-6322/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6321](https://insights.sbomify.com/CVE-2020-6321/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6320](https://insights.sbomify.com/CVE-2020-6320/): Missing authorization in SAP Marketing (Mobile Channel Servlet) (critical 9.6)
- [CVE-2020-6319](https://insights.sbomify.com/CVE-2020-6319/): Cross-site scripting in SAP NetWeaver Application Server Java (medium 6.1)
- [CVE-2020-6318](https://insights.sbomify.com/CVE-2020-6318/): Code injection in SAP NetWeaver (ABAP Server) and ABAP Platform (critical 9.1)
- [CVE-2020-6317](https://insights.sbomify.com/CVE-2020-6317/): Information disclosure in SAP Adaptive Server Enterprise (low 2.6)
- [CVE-2020-6316](https://insights.sbomify.com/CVE-2020-6316/): Missing authorization in SAP ERP (medium 4.3)
- [CVE-2020-6315](https://insights.sbomify.com/CVE-2020-6315/): Information disclosure in SAP 3D Visual Enterprise Viewer (medium 5.7)
- [CVE-2020-6314](https://insights.sbomify.com/CVE-2020-6314/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-6313](https://insights.sbomify.com/CVE-2020-6313/): Cross-site scripting in SAP NetWeaver AS JAVA (XML Forms) (medium 5.4)
- [CVE-2020-6312](https://insights.sbomify.com/CVE-2020-6312/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) (medium 5.4)
- [CVE-2020-6311](https://insights.sbomify.com/CVE-2020-6311/): Missing authorization in BANKING SERVICES FROM SAP 9.0(Bank Analyzer) (medium 6.5)
- [CVE-2020-6310](https://insights.sbomify.com/CVE-2020-6310/): Missing authorization in SAP NetWeaver (ABAP Server) and ABAP Platform (medium 4.3)
- [CVE-2020-6309](https://insights.sbomify.com/CVE-2020-6309/): Missing authorization in SAP NetWeaver AS JAVA (ENGINEAPI) (high 7.5)
- [CVE-2020-6308](https://insights.sbomify.com/CVE-2020-6308/): Server-side request forgery in SAP BusinessObjects Business Intelligence Platform (Web Services) (medium 5.3)
- [CVE-2020-6307](https://insights.sbomify.com/CVE-2020-6307/): Missing authorization in Automated Note Search Tool (SAP Basis) (medium 4.3)
- [CVE-2020-6306](https://insights.sbomify.com/CVE-2020-6306/): Missing authorization in SAP Leasing (EA Appl) (low 2.7)
- [CVE-2020-6305](https://insights.sbomify.com/CVE-2020-6305/): Cross-site scripting in SAP Process Integration - Rest Adapter (SAP XIAF) (medium 6.1)
- [CVE-2020-6304](https://insights.sbomify.com/CVE-2020-6304/): Denial of service in SAP NetWeaver Internet Communication Manager (KERNEL) (medium 5.9)
- [CVE-2020-6303](https://insights.sbomify.com/CVE-2020-6303/): Cross-site scripting in SAP Disclosure Management (medium 5.4)
- [CVE-2020-6302](https://insights.sbomify.com/CVE-2020-6302/): Information disclosure in SAP Commerce (medium 6.4)
- [CVE-2020-6301](https://insights.sbomify.com/CVE-2020-6301/): Missing authorization in SAP ERP (HCM Travel Management) (medium 5.4)
- [CVE-2020-6300](https://insights.sbomify.com/CVE-2020-6300/): Cross-site scripting in SAP Business Objects Business Intelligence Platform (Central Management Console) (medium 4.8)
- [CVE-2020-6299](https://insights.sbomify.com/CVE-2020-6299/): Information disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform (medium 4.3)
- [CVE-2020-6298](https://insights.sbomify.com/CVE-2020-6298/): Missing authorization in SAP Banking Services (Generic Market Data) (high 8.3)
- [CVE-2020-6297](https://insights.sbomify.com/CVE-2020-6297/): Information disclosure in SAP Data Intelligence (medium 6.3)
- [CVE-2020-6296](https://insights.sbomify.com/CVE-2020-6296/): Code injection in SAP NetWeaver (ABAP Server) and ABAP Platform (high 8.3)
- [CVE-2020-6295](https://insights.sbomify.com/CVE-2020-6295/): Information disclosure in SAP Adaptive Server Enterprise (high 7.0)
- [CVE-2020-6294](https://insights.sbomify.com/CVE-2020-6294/): Auth bypass in SAP Business Objects Business Intelligence Platform (high 8.5)
- [CVE-2020-6293](https://insights.sbomify.com/CVE-2020-6293/): File upload in SAP NetWeaver (Knowledge Management) (high 7.3)
- [CVE-2020-6292](https://insights.sbomify.com/CVE-2020-6292/): Auth bypass in SAP Disclosure Management (medium 4.6)
- [CVE-2020-6291](https://insights.sbomify.com/CVE-2020-6291/): Auth bypass in SAP Disclosure Management (medium 5.4)
- [CVE-2020-6290](https://insights.sbomify.com/CVE-2020-6290/): Auth bypass in SAP Disclosure Management (medium 4.2)
- [CVE-2020-6289](https://insights.sbomify.com/CVE-2020-6289/): Cross-site request forgery in SAP Disclosure Management (medium 4.3)
- [CVE-2020-6288](https://insights.sbomify.com/CVE-2020-6288/): File upload in SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) (medium 4.6)
- [CVE-2020-6287](https://insights.sbomify.com/CVE-2020-6287/): SAP NetWeaver Missing Authentication for Critical Function (critical 10.0, exploited in the wild)
- [CVE-2020-6286](https://insights.sbomify.com/CVE-2020-6286/): Path traversal in SAP NetWeaver AS JAVA (LM Configuration Wizard) (medium 5.3)
- [CVE-2020-6285](https://insights.sbomify.com/CVE-2020-6285/): Information disclosure in SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (high 7.7)
- [CVE-2020-6284](https://insights.sbomify.com/CVE-2020-6284/): Cross-site scripting in SAP NetWeaver (Knowledge Management) (critical 9.0)
- [CVE-2020-6283](https://insights.sbomify.com/CVE-2020-6283/): Cross-site scripting in SAP Fiori(Launchpad) (medium 4.8)
- [CVE-2020-6282](https://insights.sbomify.com/CVE-2020-6282/): Server-side request forgery in SAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS) (medium 5.8)
- [CVE-2020-6281](https://insights.sbomify.com/CVE-2020-6281/): Cross-site scripting in SAP Business Objects Business Intelligence Platform (BI Launchpad) (medium 6.1)
- [CVE-2020-6280](https://insights.sbomify.com/CVE-2020-6280/): Information disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform (low 2.7)
- [CVE-2020-6278](https://insights.sbomify.com/CVE-2020-6278/): Cross-site scripting in SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC) (medium 5.4)
- [CVE-2020-6276](https://insights.sbomify.com/CVE-2020-6276/): Cross-site scripting in SAP Business Objects Business Intelligence Platform (bipodata) (medium 6.1)
- [CVE-2020-6275](https://insights.sbomify.com/CVE-2020-6275/): Server-side request forgery in SAP Netweaver AS ABAP (high 7.6)
- [CVE-2020-6273](https://insights.sbomify.com/CVE-2020-6273/): Missing authorization in SAP S/4 HANA (Fiori UI for General Ledger Accounting) (medium 4.3)
- [CVE-2020-6272](https://insights.sbomify.com/CVE-2020-6272/): Cross-site scripting in SAP Commerce Cloud (medium 5.4)
- [CVE-2020-6271](https://insights.sbomify.com/CVE-2020-6271/): Missing authorization in SAP Solution Manager (Problem Context Manager) (high 8.2)
- [CVE-2020-6270](https://insights.sbomify.com/CVE-2020-6270/): Missing authorization in SAP NetWeaver AS ABAP (Banking Services) (medium 6.5)
- [CVE-2020-6269](https://insights.sbomify.com/CVE-2020-6269/): Information disclosure in SAP Business Objects Business Intelligence Platform (medium 4.3)
- [CVE-2020-6268](https://insights.sbomify.com/CVE-2020-6268/): Missing authorization in SAP ERP (Statutory Reporting for Insurance Companies) (medium 5.4)
- [CVE-2020-6267](https://insights.sbomify.com/CVE-2020-6267/): Misconfiguration in SAP Disclosure Management (medium 6.3)
- [CVE-2020-6266](https://insights.sbomify.com/CVE-2020-6266/): Open redirect in SAP Fiori for SAP S/4HANA (medium 5.4)
- [CVE-2020-6265](https://insights.sbomify.com/CVE-2020-6265/): Hardcoded credentials in SAP Commerce (critical 9.8)
- [CVE-2020-6264](https://insights.sbomify.com/CVE-2020-6264/): Information disclosure in SAP Commerce (high 8.6)
- [CVE-2020-6263](https://insights.sbomify.com/CVE-2020-6263/): Auth bypass in SAP NetWeaver AS JAVA (medium 6.9)
- [CVE-2020-6262](https://insights.sbomify.com/CVE-2020-6262/): Code injection in SAP Application Server ABAP (ST-PI) (critical 9.9)
- [CVE-2020-6261](https://insights.sbomify.com/CVE-2020-6261/): Other in SAP Solution Manager (Trace Analysis) (medium 5.3)
- [CVE-2020-6260](https://insights.sbomify.com/CVE-2020-6260/): Other in SAP Solution Manager (Trace Analysis) (medium 6.5)
- [CVE-2020-6259](https://insights.sbomify.com/CVE-2020-6259/): Missing authorization in SAP Adaptive Server Enterprise (medium 6.5)
- [CVE-2020-6258](https://insights.sbomify.com/CVE-2020-6258/): Missing authorization in SAP Identity Management (medium 4.3)
- [CVE-2020-6257](https://insights.sbomify.com/CVE-2020-6257/): Cross-site scripting in SAP Business Objects Business Intelligence Platform (CMC and BI launchpad) (medium 5.4)
- [CVE-2020-6256](https://insights.sbomify.com/CVE-2020-6256/): Missing authorization in SAP Master Data Governance (medium 5.4)
- [CVE-2020-6254](https://insights.sbomify.com/CVE-2020-6254/): Cross-site scripting in SAP Enterprise Threat Detection (medium 6.1)
- [CVE-2020-6253](https://insights.sbomify.com/CVE-2020-6253/): SQL injection in SAP Adaptive Server Enterprise (Web Services) (high 7.2)
- [CVE-2020-6252](https://insights.sbomify.com/CVE-2020-6252/): Information disclosure in SAP Adaptive Server Enterprise (Cockpit) (critical 9.0)
- [CVE-2020-6251](https://insights.sbomify.com/CVE-2020-6251/): Information disclosure in SAP BusinessObjects Business Intelligence Platform (medium 5.4)
- [CVE-2020-6250](https://insights.sbomify.com/CVE-2020-6250/): Information disclosure in SAP Adaptive Server Enterprise (medium 6.8)
- [CVE-2020-6249](https://insights.sbomify.com/CVE-2020-6249/): SQL injection in SAP Master Data Governance (S4CORE) (high 7.7)
- [CVE-2020-6248](https://insights.sbomify.com/CVE-2020-6248/): Code injection in SAP Adaptive Server Enterprise (Backup Server) (critical 9.1)
- [CVE-2020-6247](https://insights.sbomify.com/CVE-2020-6247/): Denial of service in SAP Business Objects Business Intelligence Platform (medium 5.9)
- [CVE-2020-6246](https://insights.sbomify.com/CVE-2020-6246/): Cross-site scripting in SAP NetWeaver AS ABAP (Business Server Pages Test Application SBSPEXT TABLE) (medium 6.1)
- [CVE-2020-6245](https://insights.sbomify.com/CVE-2020-6245/): Code injection in SAP Business Objects Business Intelligence Platform (medium 6.5)
- [CVE-2020-6244](https://insights.sbomify.com/CVE-2020-6244/): Other in SAP Business Client (high 7.0)
- [CVE-2020-6243](https://insights.sbomify.com/CVE-2020-6243/): Code injection in SAP Adaptive Server Enterprise (XP Server on Windows Platform) (high 8.0)
- [CVE-2020-6242](https://insights.sbomify.com/CVE-2020-6242/): Auth bypass in SAP Business Objects Business Intelligence Platform (Live Data Connect) (critical 9.8)
- [CVE-2020-6241](https://insights.sbomify.com/CVE-2020-6241/): SQL injection in SAP Adaptive Server Enterprise (high 8.8)
- [CVE-2020-6240](https://insights.sbomify.com/CVE-2020-6240/): Denial of service in SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP BASIS) (medium 5.3)
- [CVE-2020-6239](https://insights.sbomify.com/CVE-2020-6239/): Information disclosure in SAP Business One (Backup service) (medium 4.4)
- [CVE-2020-6238](https://insights.sbomify.com/CVE-2020-6238/): XML external entity in SAP Commerce (critical 9.3)
- [CVE-2020-6237](https://insights.sbomify.com/CVE-2020-6237/): Information disclosure in SAP Business Objects Business Intelligence Platform (high 7.5)
- [CVE-2020-6236](https://insights.sbomify.com/CVE-2020-6236/): Privilege escalation in SAP Adaptive Extensions (high 7.2)
- [CVE-2020-6235](https://insights.sbomify.com/CVE-2020-6235/): Auth bypass in SAP Solution Manager (Diagnostics Agent) (high 8.6)
- [CVE-2020-6234](https://insights.sbomify.com/CVE-2020-6234/): Privilege escalation in SAP Host Agent (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/48/