CVE-2020-6306

LOW 2.7CVE-2020-6306 · Published 14/01/2020 · updated 17/06/2026

In short

CVE-2020-6306 is a LOW (CVSS 2.7) vulnerability affecting leasing (sap).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
leasing sap	`= 6.0= 6.02= 6.03= 6.04= 6.05= 6.06= 6.16= 6.17`	No fix yet

Description

Missing authorization check in a transaction within SAP Leasing (update provided in SAP_APPL 6.18, EA-APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16 and 6.17).

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free