cve.bz

SAP Security Patch Day, March 2020: the CVEs

Filter

SAP Security Patch Day March 2020: the CVEs SAP published on 10 March 2020, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Microsoft, Adobe. Earlier: Feb 2020, Jan 2020, Dec 2019, Nov 2019, Oct 2019, Sep 2019, Aug 2019, Jul 2019, Jun 2019, May 2019, Apr 2019, Mar 2019. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 9.8CVE-2020-6207KEVExploitEPSS 98%

    SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.

  2. 9.1CVE-2020-6203EPSS 1.9%

    SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to paren…

  3. 9.8CVE-2020-6198EPSS 1.4%

    SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check.