CVE-2020-6299 - SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure

Back Back to CVE browser

MEDIUM

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure

Published Aug 12, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.90%

Description

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.

Affected products

Vendor SAP SE Product SAP NetWeaver (ABAP Server) and ABAP Platform Default
n/a
- Version
  < 740
  Status
  affected
  Constraints
  -
- Version
  < 750
  Status
  affected
  Constraints
  -
- Version
  < 751
  Status
  affected
  Constraints
  -
- Version
  < 752
  Status
  affected
  Constraints
  -
- Version
  < 753
  Status
  affected
  Constraints
  -
- Version
  < 754
  Status
  affected
  Constraints
  -
- Version
  < 755
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SAP SE

SAP NetWeaver (ABAP Server) and ABAP Platform

n/a

Version	Status	Constraints
< 740	affected	-
< 750	affected	-
< 751	affected	-
< 752	affected	-
< 753	affected	-
< 754	affected	-
< 755	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://launchpad.support.sap.com/#/notes/2941510
x_refsource_MISCPermissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://launchpad.support.sap.com/#/notes/2941510		x_refsource_MISCPermissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sap

Published Aug 12, 2020

Updated Aug 4, 2024

Reserved Jan 8, 2020

Link CVE-2020-6299

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-6299

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-6299