CVE-2020-6307

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-14 · updated 2026-06-17
Weakness: CWE-863

Description

Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.

Affected products

SAP SE Automated Note Search Tool (SAP Basis): 7.0, 7.01, 7.02, 7.31, 7.40, 7.50 (+4)

References

https://launchpad.support.sap.com/#/notes/2863397
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533671771
https://launchpad.support.sap.com/#/notes/2863397
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533671771

Get alerted when CVE-2020-6307 or the next vulnerability affects your stack