{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T19:35:12.272","vulnerabilities":[{"cve":{"id":"CVE-2020-6320","sourceIdentifier":"cna@sap.com","published":"2020-09-09T13:15:12.130","lastModified":"2026-06-17T03:23:03.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted. Limited knowledge of payload is required for an attacker to exploit the vulnerability and perform tasks related to contact and interaction data which impacts Confidentiality and Integrity of data in the application."},{"lang":"es","value":"SAP Marketing (Servlet), versión 130,140,150, permite a un atacante autenticado invocar determinadas funciones que están restringidas.&#xa0;Un conocimiento limitado de la carga útil es requerido para que un atacante explote la vulnerabilidad y lleve a cabo tareas relacionadas con los datos de contacto e interacción que afectan la Confidencialidad y la Integridad de los datos en la aplicación."}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP SE","product":"SAP Marketing (Mobile Channel Servlet)","versions":[{"version":"< 130","status":"affected"},{"version":"< 140","status":"affected"},{"version":"< 150","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV30":[{"source":"cna@sap.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":5.8}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:marketing:130:*:*:*:*:*:*:*","matchCriteriaId":"55DA5840-6B84-4FF9-9664-71B010ADA326"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:marketing:140:*:*:*:*:*:*:*","matchCriteriaId":"B1B91293-3048-40D4-9965-D39DDB7D54A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:marketing:150:*:*:*:*:*:*:*","matchCriteriaId":"FC26B263-A573-46AF-A30E-DF2947F8DEAA"}]}]}],"references":[{"url":"https://launchpad.support.sap.com/#/notes/2961991","source":"cna@sap.com","tags":["Permissions Required"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2961991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}