CVE-2020-6270: SAP NetWeaver Application Server Abap

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user leading to wrong prices.

Affected products

• SAP NetWeaver Application Server Abap: version 75a only; version 75b only; version 75c only; version 75d only; version 75e only; version 710 only; …

Published 2020-06-10. Last modified 2026-06-17.