CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2020-6304
High (7.5) in sap. EPSS 1.5% chance of exploitation in the next 30 days.
Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sap:netweaver_internet_communication_manager_\(kernel\)
- sap:netweaver_internet_communication_manager_\(krnl32nuc\)
- sap:netweaver_internet_communication_manager_\(krnl32uc\)
- sap:netweaver_internet_communication_manager_\(krnl64nuc\)
- sap:netweaver_internet_communication_manager_\(krnl64uc\)