CVE-2020-26838
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2020
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Business Warehouse
- Vendor
- SAP SE
- Product
- SAP Business Warehouse
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| < 700 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 701 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 702 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 731 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 740 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 750 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 751 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 752 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 753 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 754 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 755 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 782 | affected | Unavailable | Unavailable | Unavailable | None listed |
SAP BW4HANA
- Vendor
- SAP SE
- Product
- SAP BW4HANA
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| < 100 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 200 | affected | Unavailable | Unavailable | Unavailable | None listed |