CVE-2020-6190

Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system…

Medium · published February 12, 2020

CVSS v3.0
5.8
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure.

The record
Technical detail
CVSS v3.0
5.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00896 · 59.2th percentile
Published
2020-02-12T19:46Z
EPSS history
Timeline
  • 12 FEB 19:46Z
    Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system…
    cvelistv5