{"id":"CVE-2020-6307","aliases":["EUVD-2020-27457","GHSA-6p9c-w66g-f5rf"],"status":"published","title":"Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7...","description":"Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00723,"percentile":0.54291,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-863"],"published":"2020-01-14T17:52:59Z","modified":"2026-06-17T03:23:02Z","products":[{"vendor":"sap","product":"basis"},{"vendor":"sap se","product":"automated note search tool (sap basis)"}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533671771","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2863397","tags":["x_refsource_MISC","x_transferred","Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6307"},{"url":"https://github.com/advisories/GHSA-6p9c-w66g-f5rf"}],"sources":{"cve":[{"id":"CVE-2020-6307","description":"Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.","status":"published","published":"2020-01-14T17:52:59Z","modified":"2024-08-04T08:55:22.405Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:52.592504Z"}],"euvd":[{"id":"EUVD-2020-27457","description":"Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.","status":"published","published":"2020-01-14T17:52:59Z","modified":"2024-08-04T08:55:22Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T03:08:03.741202Z"}],"ghsa":[{"id":"GHSA-6p9c-w66g-f5rf","title":"Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7...","description":"Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.","status":"published","published":"2022-05-24T17:06:11Z","modified":"2023-01-29T05:01:01Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:44:43.584363Z"}],"nvd":[{"id":"CVE-2020-6307","description":"Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.","status":"published","published":"2020-01-14T18:15:12.18Z","modified":"2026-06-17T03:23:02.457Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:05:52.385274Z"}]}}