CVE-2020-6371: SAP NetWeaver Application Server Abap

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure.

Affected products

• SAP NetWeaver Application Server Abap: version 710 only; version 711 only; version 730 only; version 731 only; version 740 only; version 750 only

Published 2020-10-15. Last modified 2026-06-17.