Critical Vulnerability in SAP NetWeaver AS Java

ronjor · Jul 14, 2020

Original release date: July 13, 2020

On July 13, 2020 EST, SAP released a security update to address a critical vulnerability, CVE-2020-6287, affecting the SAP NetWeaver Application Server (AS) Java component LM Configuration Wizard. An unauthenticated attacker can exploit this vulnerability through the Hypertext Transfer Protocol (HTTP) to take control of trusted SAP applications.
Due to the criticality of this vulnerability, the attack surface this vulnerability represents, and the importance of SAP’s business applications, the Cybersecurity and Infrastructure Security Agency (CISA) strongly recommends organizations immediately apply patches. CISA recommends organizations prioritize patching internet-facing systems, and then internal systems.
Click to expand...

Log in or Sign up

Critical Vulnerability in SAP NetWeaver AS Java

ronjor Global Moderator

Log in or Sign up

Critical Vulnerability in SAP NetWeaver AS Java

ronjor Global Moderator

Useful Searches