What’s Vulnerable › Vulnerabilities

CVE-2020-6248

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-12 · updated 2026-06-17
• Weakness: CWE-20

Description

SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection.

Affected products

• SAP SE SAP Adaptive Server Enterprise (Backup Server): 16.0

References

• https://launchpad.support.sap.com/#/notes/2917275
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://launchpad.support.sap.com/#/notes/2917275
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222

Get alerted when CVE-2020-6248 or the next vulnerability affects your stack