Critical Vulnerability Hits SAP Enterprise Applications

RECON could allow an unauthenticated attacker to take control of SAP enterprise applications through the web interface.

The US Department of Homeland Securitys Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert on a critical vulnerability in SAP NetWeaver AS Java. The vulnerability could allow an unauthenticated attacker to use HTTP for takeover of applications built using NetWeaver.
The vulnerability,
CVE-2020-6287
, involves a lack of authentication in a web component of NetWeaver AS Java. Because of the nature of the components, applications across a broad swath of business-critical enterprise SAP installations could be affected.
Dubbed Remote Exploitable Code on Netweaver (RECON) by the
researchers at Onapsis
who discovered it, the vulnerability has been given a CVSS score of 10, the most critical.
SAP has issued a patch for the vulnerability. Both SAP and CISA urge SAP customers to apply the patch immediately.
Read more
here
.

Last News
▸ Google increases bug bounty rewards. ◂ Discovered: 26/12/2024 Category: security	▸ Microsoft and FBI shut down thousands of Citadel Botnets. ◂ Discovered: 26/12/2024 Category: security	▸ China accuses America of hacking them as well. ◂ Discovered: 26/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Critical Vulnerability Hits SAP Enterprise Applications