Vulnerability Details CVE-2020-6188
VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.4%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 6.5
Products affected by CVE-2020-6188
-
-
cpe:2.3:a:sap:s/4_hana:1511
-
cpe:2.3:a:sap:s/4_hana:1610
-
cpe:2.3:a:sap:s/4_hana:1709
-
cpe:2.3:a:sap:s/4_hana:1809
-
cpe:2.3:a:sap:s/4_hana:1909