CVE-2020-6234

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-14 · updated 2026-06-17

Description

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.

Affected products

SAP SE SAP Host Agent: 7.21

References

http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-Escalation.html
http://seclists.org/fulldisclosure/2021/Apr/5
https://launchpad.support.sap.com/#/notes/2902645
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-Escalation.html
http://seclists.org/fulldisclosure/2021/Apr/5
https://launchpad.support.sap.com/#/notes/2902645
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202

Get alerted when CVE-2020-6234 or the next vulnerability affects your stack