CVE-2020-6309

HIGH · CVSS 7.5 EPSS 1.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-08-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-6309

Severity

HIGH

CVSS

7.5

EPSS

1.80%

Java

Original NVD Description

SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication checks for a web service allowing the attacker to send several payloads and leading to complete denial of service.