{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T15:42:16.604","vulnerabilities":[{"cve":{"id":"CVE-2020-6181","sourceIdentifier":"cna@sap.com","published":"2020-02-12T20:15:13.777","lastModified":"2026-06-17T03:22:49.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability."},{"lang":"es","value":"En algunas circunstancias, la implementación de SSO SAML en SAP NetWeaver (SAP_BASIS versiones 702, 730, 731, 740 y SAP ABAP Platform (SAP_BASIS versiones 750, 751, 752, 753, 754), permite a un atacante incluir datos invalidados en encabezado de respuesta HTTP enviado a un usuario Web,  conllevando a una vulnerabilidad de División de Respuesta HTTP."}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP SE","product":"SAP NetWeaver (SAP Basis)","versions":[{"version":"= 7.02","status":"affected"},{"version":"= 7.30","status":"affected"},{"version":"= 7.31","status":"affected"},{"version":"= 7.40","status":"affected"}]},{"vendor":"SAP SE","product":"SAP ABAP Platform (SAP Basis)","versions":[{"version":"= 7.50","status":"affected"},{"version":"= 7.51","status":"affected"},{"version":"= 7.52","status":"affected"},{"version":"= 7.53","status":"affected"},{"version":"= 7.54","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV30":[{"source":"cna@sap.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:abap_platform:7.50:*:*:*:*:*:*:*","matchCriteriaId":"A7AAA98F-50DD-4752-8D42-1E7B5B93BDB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:abap_platform:7.51:*:*:*:*:*:*:*","matchCriteriaId":"1F7FC59C-72BB-4977-9003-DE65F9BE3361"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:abap_platform:7.52:*:*:*:*:*:*:*","matchCriteriaId":"143EB1D2-F62A-4223-9D3A-0CCBF75FEF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:abap_platform:7.53:*:*:*:*:*:*:*","matchCriteriaId":"688AE1F8-1A9D-4B2E-91DE-1E0010BE9DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:abap_platform:7.54:*:*:*:*:*:*:*","matchCriteriaId":"A643D231-9256-4325-9706-662EF80D0531"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.02:*:*:*:*:*:*:*","matchCriteriaId":"A9805246-77E5-456C-B7CF-07CFF2F9F069"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*","matchCriteriaId":"606EFE4F-57A4-44E2-A98D-F0867A658218"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*","matchCriteriaId":"FECD5E96-7669-4747-80D2-27F95BF420BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*","matchCriteriaId":"F019F7F5-7740-4BD4-850F-D7A1923C6200"}]}]}],"references":[{"url":"https://launchpad.support.sap.com/#/notes/2880744","source":"cna@sap.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2880744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}