CVE-2020-6298

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-08-12 · updated 2026-06-17
Weakness: CWE-862

Description

SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user to display protected Business Partner Generic Market Data (GMD) and change related GMD key figure values, due to Missing Authorization Check.

Affected products

SAP Generic Market Data: 400, 450, 500

References

https://launchpad.support.sap.com/#/notes/2939685
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345
https://launchpad.support.sap.com/#/notes/2939685
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345

Get alerted when CVE-2020-6298 or the next vulnerability affects your stack