CVE-2020-26828

SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type

Medium · published December 9, 2020

CVSS v3.0
5.4
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. In some file types it is possible to enter formulas which can call external applications or execute scripts. The execution of a payload (script) on target machine could be used to steal and modify the data available in the spreadsheet

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Published
2020-12-09T16:30Z
EPSS history
Timeline
  • 09 DEC 16:30Z
    SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type
    cvelistv5