How severe is CVE-2020-6250?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Sap Adaptive Server Enterprise

Q: What is CVE-2020-6250?

CVE-2020-6250 is a medium-severity vulnerability in Sap Adaptive Server Enterprise. CVSS score: 6.8/10. Published 2020-05-12.

CVE-2020-6250

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop the server like an administrator.

EPSS: 0.005 (41.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sap Adaptive_server_enterprise — versions 16.0
Sap Se Adaptive Server Enterprise — versions < 16.0

References

cna@sap.com (x_refsource_MISC, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-6250?: CVE-2020-6250 is a medium-severity vulnerability in Sap Adaptive Server Enterprise. CVSS score: 6.8/10. Published 2020-05-12.
How severe is CVE-2020-6250?: Medium severity. CVSS v3 base score is 6.8 out of 10.