CVE-2020-6304
14.01.2020, 18:15
Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sap | netweaver_internet_communication_manager_\(kernel\) | 7.21 |
| sap | netweaver_internet_communication_manager_\(kernel\) | 7.22 |
| sap | netweaver_internet_communication_manager_\(kernel\) | 7.49 |
| sap | netweaver_internet_communication_manager_\(kernel\) | 7.53 |
| sap | netweaver_internet_communication_manager_\(krnl32nuc\) | 7.21 |
| sap | netweaver_internet_communication_manager_\(krnl32nuc\) | 7.21ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl32nuc\) | 7.22 |
| sap | netweaver_internet_communication_manager_\(krnl32nuc\) | 7.22ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl32uc\) | 7.21 |
| sap | netweaver_internet_communication_manager_\(krnl32uc\) | 7.21ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl32uc\) | 7.22 |
| sap | netweaver_internet_communication_manager_\(krnl32uc\) | 7.22ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl64nuc\) | 7.21 |
| sap | netweaver_internet_communication_manager_\(krnl64nuc\) | 7.21ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl64nuc\) | 7.22 |
| sap | netweaver_internet_communication_manager_\(krnl64nuc\) | 7.22ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl64nuc\) | 7.49 |
| sap | netweaver_internet_communication_manager_\(krnl64uc\) | 7.21 |
| sap | netweaver_internet_communication_manager_\(krnl64uc\) | 7.21ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl64uc\) | 7.22 |
| sap | netweaver_internet_communication_manager_\(krnl64uc\) | 7.22ext:ext |
| sap | netweaver_internet_communication_manager_\(krnl64uc\) | 7.49 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration