CVE-2020-6320

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-09-09 · updated 2026-06-17

Description

SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted. Limited knowledge of payload is required for an attacker to exploit the vulnerability and perform tasks related to contact and interaction data which impacts Confidentiality and Integrity of data in the application.

Affected products

SAP_SE SAP Marketing (Contacts App): 130, 140, 150

References

https://launchpad.support.sap.com/#/notes/2961991
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700
https://launchpad.support.sap.com/#/notes/2961991
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700

Get alerted when CVE-2020-6320 or the next vulnerability affects your stack