SAP© Security Advisories - 08 2020 - SecurityBridge Cloud Platform

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Yikes, there is work to do!
This time we found critical correction advisiories. We count 19 and the highest CVSS score is 9.0.

Severity

SAP© Security advisories 19

System Types

Affected SAP© system types

_{Related note}
2949196

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6301] Missing Authorization check in SAP ERP (HCM Travel Management)

Security Advisory

_{Related note}
2948317

_CVSS
6.1

_{Affected system
type}
SAP Commerce

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
Vulnerabilities in open source libraries used in SAP Commerce

Security Advisory

_{Related note}
2928635

_CVSS
9.0

_{Affected system
type}
Java

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6284] Cross-Site Scripting (XSS) in SAP NetWeaver (Knowledge Management)

Security Advisory

_{Related note}
2927956

_CVSS
8.5

_{Affected system
type}
BI/BO platform

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6294] Missing Authentication check in SAP BusinessObjects Business Intelligence Platform

Security Advisory

_{Related note}
2885671

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6273] Missing Authorization check in SAP S/4 HANA (Fiori UI for General Ledger Accounting)

Security Advisory

_{Related note}
2938162

_CVSS
7.3

_{Affected system
type}
Java

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6293] Unrestricted File Upload in SAP NetWeaver (Knowledge Management)

Security Advisory

_{Related note}
2941315

_CVSS
7.5

_{Affected system
type}
Java

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6309] Missing Authentication check in SAP NetWeaver AS JAVA

Security Advisory

_{Related note}
2921615

_CVSS
5.5

_{Affected system
type}
BI/BO platform

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
BI Platform stores SAP BW Authentication Password as clear text

Security Advisory

_{Related note}
2944988

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6310] Information Disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform

Security Advisory

_{Related note}
2754546

_CVSS
5.0

_{Affected system
type}
Lumira Designer

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
Potential information disclosure in Lumira Designer

Security Advisory

_{Related note}
2756551

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
Missing Authorization check in TSW Supply Chain Visualization

Security Advisory

_{Related note}
2939685

_CVSS
8.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6298] Missing Authorization check in SAP Banking Services (Generic Market Data)

Security Advisory

_{Related note}
2925827

_CVSS
4.8

_{Affected system
type}
BI/BO platform

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6300] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform(Central Management Console)

Security Advisory

_{Related note}
2941667

_CVSS
8.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6296] Code Injection Vulnerability in SAP NetWeaver (ABAP) and ABAP Platform

Security Advisory

_{Related note}
2941332

_CVSS
7.0

_{Affected system
type}
SAP Adaptive Server...

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6295] Information Disclosure in SAP Adaptive Server Enterprise

Security Advisory

_{Related note}
2941510

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6299] Information Disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform

Security Advisory

_{Related note}
2940823

_CVSS
6.3

_{Affected system
type}
SAP Data Hub

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
[CVE-2020-6297] Information Disclosure in SAP Data Intelligence

Security Advisory

_{Related note}
2593479

_CVSS
3.9

_{Affected system
type}
Java

_Patchday
2020-08

_{Released
on}
2018/06/15

Description
Checking server certificates and host name of managed systems

Security Advisory

_{Related note}
2941170

_CVSS
6.1

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2020-08

_{Released
on}
2020/08/11

Description
Cross-Site Scripting (XSS) vulnerabilities in modified jQuery bundled with SAPUI5

Security Advisory

Notifications

Severity

SAP© Security advisories 19

System Types

Affected SAP© system types

Related note 2949196

CVSS 5.4

Affected system type ABAP

Patchday2020-08

Released on2020/08/11

Related note 2948317

CVSS 6.1

Affected system type SAP Commerce

Patchday2020-08

Released on2020/08/11

Related note 2928635

CVSS 9.0

Affected system type Java

Patchday2020-08

Released on2020/08/11

Related note 2927956

CVSS 8.5

Affected system type BI/BO platform

Patchday2020-08

Released on2020/08/11

Related note 2885671

CVSS 4.3

Affected system type ABAP

Patchday2020-08

Released on2020/08/11

Related note 2938162

CVSS 7.3

Affected system type Java

Patchday2020-08

Released on2020/08/11

Related note 2941315

CVSS 7.5

Affected system type Java

Patchday2020-08

Released on2020/08/11

Related note 2921615

CVSS 5.5

Affected system type BI/BO platform

Patchday2020-08

Released on2020/08/11

Related note 2944988

CVSS 4.3

Affected system type ABAP

Patchday2020-08

Released on2020/08/11

Related note 2754546

CVSS 5.0

Affected system type Lumira Designer

Patchday2020-08

Released on2020/08/11

Related note 2756551

CVSS 6.3

Affected system type ABAP

Patchday2020-08

Released on2020/08/11

Related note 2939685

CVSS 8.3

Affected system type ABAP

Patchday2020-08

Released on2020/08/11

Related note 2925827

CVSS 4.8

Affected system type BI/BO platform

Patchday2020-08

Released on2020/08/11

Related note 2941667

CVSS 8.3

Affected system type ABAP

Patchday2020-08

Released on2020/08/11

Related note 2941332

CVSS 7.0

Affected system type SAP Adaptive Server...

Patchday2020-08

Released on2020/08/11

_{Related note}
2949196

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2948317

_CVSS
6.1

_{Affected system
type}
SAP Commerce

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2928635

_CVSS
9.0

_{Affected system
type}
Java

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2927956

_CVSS
8.5

_{Affected system
type}
BI/BO platform

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2885671

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2938162

_CVSS
7.3

_{Affected system
type}
Java

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2941315

_CVSS
7.5

_{Affected system
type}
Java

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2921615

_CVSS
5.5

_{Affected system
type}
BI/BO platform

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2944988

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2754546

_CVSS
5.0

_{Affected system
type}
Lumira Designer

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2756551

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2939685

_CVSS
8.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2925827

_CVSS
4.8

_{Affected system
type}
BI/BO platform

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2941667

_CVSS
8.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2941332

_CVSS
7.0

_{Affected system
type}
SAP Adaptive Server...

_Patchday
2020-08

_{Released
on}
2020/08/11

_{Related note}
2941510

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2020-08

_{Released
on}
2020/08/11