CVE-2020-6232

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-14 · updated 2026-06-17
Weakness: CWE-862

Description

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.

Affected products

SAP_SE SAP Commerce Cloud: 1811, 1905

References

https://launchpad.support.sap.com/#/notes/2888556
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
https://launchpad.support.sap.com/#/notes/2888556
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202

Get alerted when CVE-2020-6232 or the next vulnerability affects your stack