{"id":"CVE-2020-6286","published":"2020-07-14T12:30:14Z","modified":"2024-08-04T08:55:22Z","title":"The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM…","vendor":"SAP SE","product":"SAP NetWeaver AS JAVA (LM Configuration Wizard)","tier":"core","eol":null,"affectedVersions":[{"vendor":"SAP SE","product":"SAP NetWeaver AS JAVA (LM Configuration Wizard)","versions":["< 7.30","< 7.31","< 7.40","< 7.50"]}],"description":{"text":"The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal.","provenance":"source","from":"CVE.org"},"summary":{"text":"The insufficient input path validation flaw lies in a parameter of the web service in SAP NetWeaver AS JAVA (LM Configuration Wizard) from SAP SE. An unauthenticated attacker over the network can exploit it to download zip files to a specific directory, resulting in path traversal, with no authentication or user interaction required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T04:54:14Z"},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.23679,"percentile":0.97814,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-06-12","exploitedFirstSeen":"2026-06-12","ransomware":false,"evidence":[{"url":"https://previdian.com/CVE-2020-6286","date":"2026-06-12"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"Proof Point Emerging Exploit list","url":"https://otx.alienvault.com/pulse/6399fdc966948f6b537b9762","created":"2022-12-14"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675","tags":["x_refsource_MISC"]},{"url":"https://launchpad.support.sap.com/#/notes/2934135","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2020-27436","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27436","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2020-08-13","earliestUrl":"https://github.com/murataydemir/CVE-2020-6286","repos":[{"name":"murataydemir/CVE-2020-6286","url":"https://github.com/murataydemir/CVE-2020-6286","stars":6,"created":"2020-08-13"}]},"first":{"date":"2020-08-13","source":"PoC-in-GitHub","url":"https://github.com/murataydemir/CVE-2020-6286"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2020-07-14","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2020-6286","provenance":"source"},{"date":"2020-08-13","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/murataydemir/CVE-2020-6286","provenance":"source"},{"date":"2026-06-12","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://previdian.com/CVE-2020-6286","provenance":"source"}],"speed":{"daysToPublicExploit":30,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":69.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 141 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.56,"detail":"percentile 0.9781"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":3.71,"detail":"base score 5.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}