Vulnerability Details CVE-2020-6371
User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.9%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
Products affected by CVE-2020-6371
-
cpe:2.3:a:sap:netweaver_application_server_abap:710
-
cpe:2.3:a:sap:netweaver_application_server_abap:711
-
cpe:2.3:a:sap:netweaver_application_server_abap:730
-
cpe:2.3:a:sap:netweaver_application_server_abap:731
-
cpe:2.3:a:sap:netweaver_application_server_abap:740
-
cpe:2.3:a:sap:netweaver_application_server_abap:750