CVE-2020-6299: SAP Abap Platform

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.

Affected products

• SAP Abap Platform: version 740 only; version 750 only; version 751 only; version 753 only; version 754 only; version 755 only
• SAP NetWeaver Application Server Abap: version 740 only; version 750 only; version 751 only; version 753 only; version 754 only; version 755 only

Published 2020-08-12. Last modified 2026-06-17.