CVE-2020-6181: sap se sap abap platform (sap basis)
Vulnerability summary
CVE-2020-6181 is a medium (CVSS 5.8) vulnerability in sap se sap abap platform (sap basis). EPSS estimates a 0.78% chance of exploitation in the next 30 days, higher than 55.2% of scored vulnerabilities.
Timeline
- 12-02-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST5.8MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS trend
Probability
0.78%
Chance of exploitation in the next 30 days
Percentile
55%
Versus all other CVEs
30-day change
0.00 pp
From 0.78% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Sap2 products
- abap_platform750 | 751 | 752 | 753 | 754
- netweaver702 | 7.30 | 731 | 7.40
Sap se2 products
- sap abap platform (sap basis)= 7.50 | = 7.51 | = 7.52 | = 7.53 | = 7.54
- sap netweaver (sap basis)= 7.02 | = 7.30 | = 7.31 | = 7.40
2 vendors · 4 products