TI-2020-05170 Aliases CVE-2020-6318 GHSA-rppr-4h7c-mc9c

Code injection in SAP NetWeaver and ABAP Platform

MEDIUM 40CWE-94Published 2020-09-09 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the products to terminate.

Why it matters now

EPSS 0.05826 93rd percentileScored 2026-11-07

Public exploit Yes 2 exploit referencesTagged by NVD

Fix Fixed SAP NetWeaver (ABAP Server) and ABAP Platform (SAP SE): 700, 701, 702 +11

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SAP	SAP NetWeaver (ABAP Server) and ABAP Platform	before 700; before 701; before 702; before 710; before 711; before 730; before 731; before 740; before 750; before 751; before 752; before 753; before 754; before 755	700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755	Patch available	CNA

SAP NetWeaver (ABAP Server) and ABAP Platform VendorSAP Affected before 700; before 701; before 702; before 710; before 711; before 730; before 731; before 740; before 750; before 751; before 752; before 753; before 754; before 755 Fixed in 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755 Patch available CNA

CPE configurations NVD · 13

CPE	Versions	Role	Vendor
cpe:2.3:a:sap:abap_platform:700:::::::*	700	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:701:::::::*	701	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:702:::::::*	702	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:710:::::::*	710	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:711:::::::*	711	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:730:::::::*	730	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:731:::::::*	731	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:740:::::::*	740	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:750:::::::*	750	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:751:::::::*	751	Vulnerable	SAP

cpe:2.3:a:sap:abap_platform:700:*:*:*:*:*:*:* Versions 700 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:701:*:*:*:*:*:*:* Versions 701 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:702:*:*:*:*:*:*:* Versions 702 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:710:*:*:*:*:*:*:* Versions 710 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:711:*:*:*:*:*:*:* Versions 711 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:730:*:*:*:*:*:*:* Versions 730 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:731:*:*:*:*:*:*:* Versions 731 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:740:*:*:*:*:*:*:* Versions 740 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:750:*:*:*:*:*:*:* Versions 750 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:751:*:*:*:*:*:*:* Versions 751 Vulnerable ·SAP

Show 3 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:sap:abap_platform:753:::::::*	753	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:754:::::::*	754	Vulnerable	SAP
cpe:2.3:a:sap:abap_platform:755:::::::*	755	Vulnerable	SAP

cpe:2.3:a:sap:abap_platform:753:*:*:*:*:*:*:* Versions 753 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:754:*:*:*:*:*:*:* Versions 754 Vulnerable ·SAP
cpe:2.3:a:sap:abap_platform:755:*:*:*:*:*:*:* Versions 755 Vulnerable ·SAP

Remediation

Fix · CNA SAP NetWeaver (ABAP Server) and ABAP Platform (SAP SE) Fixed in 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755

Timeline

2026-10-02 Threatist record created from CVE-2020-6318
2026-10-03 Alias added: GHSA-rppr-4h7c-mc9c

References

Exploit 2

Advisory 1

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700

Other 1

https://launchpad.support.sap.com/#/notes/2958563

TI-2021-19921 Code injection in SAP ABAP Server & ABAP Platform CVSS 3.1CRITICAL 9.8
TI-2024-14732 Code Injection vulnerability in SAP ABA (Application Basis) CVSS 3.1CRITICAL 9.1
TI-2020-05148 SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730… CVSS 3.1HIGH 8.8
TI-2023-10915 SQL Injection vulnerability in SAP ABAP Platform CVSS 3.1MEDIUM 6.8
TI-2020-05039 Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS… CVSS 3.1MEDIUM 5.8
TI-2024-18506 Missing Authorization check in SAP ABAP Platform CVSS 3.1MEDIUM 5.3

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences