CVE-2020-6298: SAP Generic Market Data

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user to display protected Business Partner Generic Market Data (GMD) and change related GMD key figure values, due to Missing Authorization Check.

Affected products

• SAP Generic Market Data: version 400 only; version 450 only; version 500 only

Published 2020-08-12. Last modified 2026-06-17.