H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticated access to execute configuration tasks and create administrative users.

Labels

exploitedkev

CISA KEV context

Vendor / productSAP NetWeaver
Added2021-11-03
Due date2022-05-03
6 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2020-6287
open
cwe
CWE-306
open