Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 49 of 215.
- CVE-2020-6233 Missing authorization in SAP S/4 HANA (Financial Products Subledger and Banking Services) (FSAPPL)
- CVE-2020-6232 Missing authorization in SAP Commerce
- CVE-2020-6231 Cross-site scripting in SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface)
- CVE-2020-6230 Code injection in SAP OrientDB
- CVE-2020-6229 Cross-site scripting in SAP NetWeaver AS ABAP (Business Server Pages application CRM BSP FRAME)
- CVE-2020-6228 Security feature bypass in SAP Business Client
- CVE-2020-6227 Other in SAP Business Objects Business Intelligence Platform (CMS / Auditing issues)
- CVE-2020-6226 Cross-site scripting in SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface)
- CVE-2020-6225 Path traversal in SAP NetWeaver (Knowledge Management) (KMC-CM)
- CVE-2020-6224 Information disclosure in SAP NetWeaver AS Java (HTTP Service)
- CVE-2020-6223 Open redirect in SAP Business Objects Business Intelligence Platform
- CVE-2020-6222 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
- CVE-2020-6221 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform
- CVE-2020-6220 Cross-site scripting in SAP Business Objects Business Intelligence Platform
- CVE-2020-6219 Deserialization in Crystal Reports for VS
- CVE-2020-6218 Information disclosure in SAP Business Objects Business Intelligence Platform
- CVE-2020-6217 Cross-site scripting in SAP NetWeaver AS ABAP (Business Server Pages Test Application IT05)
- CVE-2020-6216 Cross-site scripting in SAP Business Objects Business Intelligence Platform (BI Launchpad)
- CVE-2020-6215 Open redirect in SAP NetWeaver AS ABAP (Business Server Pages Test Application IT00)
- CVE-2020-6214 Missing authorization in SAP S/4HANA (Financial Products Subledger)
- CVE-2020-6213 Cross-site scripting in SAP NetWeaver AS ABAP (Business Server Pages Test Application SBSPEXT PHTMLB)
- CVE-2020-6212 Missing authorization in SAP ERP
- CVE-2020-6211 Open redirect in SAP Business Objects Business Intelligence Platform
- CVE-2020-6210 Cross-site scripting in SAP Fiori Launchpad
- CVE-2020-6209 Missing authorization in SAP Disclosure Management
- CVE-2020-6208 Use after free in SAP Business Objects Business Intelligence Platform (Crystal Reports)
- CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function
- CVE-2020-6206 Cross-site request forgery in SAP Cloud Platform Integration for Data Services
- CVE-2020-6205 Cross-site scripting in SAP NetWeaver Application Server ABAP (Smart Forms) - SAP BASIS
- CVE-2020-6204 Missing authorization in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV)
- CVE-2020-6203 Path traversal in SAP NetWeaver UDDI Server (Services Registry)
- CVE-2020-6202 Other in SAP NetWeaver Application Server Java (User Management Engine)
- CVE-2020-6201 Cross-site scripting in SAP Commerce Cloud (Testweb Extension)
- CVE-2020-6200 Cross-site scripting in SAP Commerce Cloud (SmartEdit Extension)
- CVE-2020-6199 Missing authorization in SAP ERP (EAPPGLO)
- CVE-2020-6198 Auth bypass in SAP Solution Manager (Diagnostics Agent)
- CVE-2020-6197 Auth bypass in SAP Enable Now
- CVE-2020-6196 Denial of service in SAP BusinessObjects Mobile (MobileBIService)
- CVE-2020-6195 Information disclosure in SAP Business Objects Business Intelligence Platform
- CVE-2020-6193 Cross-site scripting in SAP NetWeaver (Knowledge Management ICE Service)
- CVE-2020-6192 Command injection in SAP Landscape Management
- CVE-2020-6191 Privilege escalation in SAP Landscape Management
- CVE-2020-6190 Information disclosure in SAP NetWeaver AS Java (Heap Dump Application)
- CVE-2020-6189 Information disclosure in SAP Business Objects Business Intelligence Platform (CMC)
- CVE-2020-6188 Missing authorization in SAP ERP (SAP APPL)
- CVE-2020-6187 XML external entity in SAP NetWeaver (Guided Procedures)
- CVE-2020-6186 Denial of service in SAP Host Agent
- CVE-2020-6185 Cross-site scripting in SAP NetWeaver (SAP Basis)
- CVE-2020-6184 Cross-site scripting in Automated Note Search Tool (SAP Basis)
- CVE-2020-6183 Missing authorization in SAP Host Agent
- CVE-2020-6181 Other in SAP ABAP Platform (SAP Basis)
- CVE-2020-6178 Information disclosure in SAP Enable Now
- CVE-2020-6177 Denial of service in SAP Mobile Platform
- CVE-2020-6175 Security feature bypass in citrix:citrix sd-wan center
- CVE-2020-6174 Incorrect threshold signature computation in TUF
- CVE-2020-6173 Client Denial of Service on TUF
- CVE-2020-6171 Cross-site scripting in communilink:clink office
- CVE-2020-6170 Auth bypass in genexis:platinum-4410 firmware
- CVE-2020-6168 Missing authorization in webfactoryltd:minimal coming soon \& maintenance mode
- CVE-2020-6167 Cross-site request forgery in webfactoryltd:minimal coming soon \& maintenance mode
- CVE-2020-6166 Missing authorization in webfactoryltd:minimal coming soon \& maintenance mode
- CVE-2020-6165 Silverstripe has Incorrect Default Permissions
- CVE-2020-6164 Silverstripe CMS information disclosure
- CVE-2020-6163 Cross-site scripting in mediawiki:mediawiki
- CVE-2020-6162 Memory corruption in bftpd project:bftpd
- CVE-2020-6159 Cross-site scripting in Opera for Android
- CVE-2020-6158 Other in Opera Mini for Android
- CVE-2020-6157 Other in Opera Touch for iOS
- CVE-2020-6156 Memory corruption in Pixar
- CVE-2020-6155 Memory corruption in Pixar
- CVE-2020-6152 Memory corruption in Accusoft
- CVE-2020-6151 Memory corruption in Accusoft
- CVE-2020-6150 Memory corruption in Pixar
- CVE-2020-6149 Memory corruption in Pixar
- CVE-2020-6148 Memory corruption in Pixar
- CVE-2020-6147 Memory corruption in Pixar
- CVE-2020-6146 Memory corruption in Nitro Pro
- CVE-2020-6145 SQL injection in ERPNext
- CVE-2020-6144 Code injection in OS4Ed
- CVE-2020-6143 Code injection in OS4Ed
- CVE-2020-6142 Path traversal in OS4Ed
- CVE-2020-6141 SQL injection in OS4Ed
- CVE-2020-6140 SQL injection in OS4Ed
- CVE-2020-6139 SQL injection in OS4Ed
- CVE-2020-6138 SQL injection in OS4Ed
- CVE-2020-6137 SQL injection in OS4Ed
- CVE-2020-6136 SQL injection in OS4Ed
- CVE-2020-6135 SQL injection in OS4Ed
- CVE-2020-6134 SQL injection in OS4Ed
- CVE-2020-6133 SQL injection in OS4Ed
- CVE-2020-6132 SQL injection in OS4Ed
- CVE-2020-6131 SQL injection in OS4ED
- CVE-2020-6130 SQL injection in OS4ED
- CVE-2020-6129 SQL injection in OS4ED
- CVE-2020-6128 SQL injection in OS4Ed
- CVE-2020-6127 SQL injection in OS4Ed
- CVE-2020-6126 SQL injection in OS4Ed
- CVE-2020-6125 SQL injection in OS4Ed
- CVE-2020-6124 SQL injection in OS4Ed
- CVE-2020-6123 SQL injection in OS4Ed