---
cve: "CVE-2020-6191"
severity: "HIGH"
cvss: 7.2
epss: "1.6%"
vendor: "SAP SE"
kev: false
exploited: false
published: "2020-02-12 20:15:14"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-11T09:32:27+02:00"
---

# CVE-2020-6191

> 7.2 HIGH

## Beschreibung

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation.

## CVSS-Vektor

```
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812>
- <https://launchpad.support.sap.com/#/notes/2878030>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2020-6191) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_