CVE-2020-6292: SAP Disclosure Management

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration.

Affected products

• SAP Disclosure Management: version 10.1 only

Published 2020-07-14. Last modified 2026-06-17.