CVE-2020-6202
SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; does not sufficiently validate the LDAP data source configuration XML document accepted from an untrusted source, leading to Missing XML Validation.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - cna@sap.com
- Published
- 2020-03-10
- Last modified
- 2024-08-04
- Weaknesses
- CWE-112, CWE-20
Affected products
- Netweaver Application Server Java (Sap)
- Sap Netweaver Application Server Java User Management Engine (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2847787
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305
