Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2020-6287

Quick assessment

Affected

SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard)

Exploitation

Confirmed exploitation in the wild; remediate immediately

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SAP Netweaver是德国思爱普（SAP）公司的一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。SAP NetWeaver Application Server（AS）Java是一款运行于NetWeaver中且基于Java编程语言的应用服务器。 SAP NetWeaver AS JAVA (LM Configuration Wizard)中存在授权问题漏洞，该漏洞源于程序未执行身份验证检查。攻击者可利用该漏洞执行配置任务，在SAP Java系统上执行重要操作，包括创建管理

AI Predicted 9.8 Difficulty: Easy KEV EPSS 94.72% · P100 Updated Feb 24, 2026

Public Exploits 2

Metasploit · 1 cve_2020_6287_ws_add_user.rb [auxiliary]

Nuclei · 1 CVE-2020-6287.yaml [template]

In-the-Wild Activity Observed cisa_kev · confirmed

Possible ATT&CK Techniques 1 AI

T1136 · Create Account

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-6287

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

SAP NetWeaver AS JAVA 授权问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
SAP SE	SAP NetWeaver AS JAVA (LM Configuration Wizard)	< 7.30	-

II. Public POCs for CVE-2020-6287

#	POC Description	Source Link	Shenlong Link
1	PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)	https://github.com/chipik/SAP_RECON	POC Details
2	PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 This PoC only create user with unauthentication permission and no more administrator permission set. This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials of this project. Original finding: CVE-2020-6287: Pablo Artuso CVE-2020-6286: Yvan 'iggy' G. Usage: python sap-CVE-2020-6287-add-user.py <HTTP(s)://IP:Port	https://github.com/duc-nt/CVE-2020-6287-exploit	POC Details
3	None	https://github.com/Onapsis/CVE-2020-6287_RECON-scanner	POC Details
4	sap netweaver portal add user administrator	https://github.com/ynsmroztas/CVE-2020-6287-Sap-Add-User	POC Details
5	[CVE-2020-6287] SAP NetWeaver AS JAVA (LM Configuration Wizard) Authentication Bypass (Create Simple & Administrator Java User)	https://github.com/murataydemir/CVE-2020-6287	POC Details
6	Checker help to verify created account or find it's mandat	https://github.com/qmakake/SAP_CVE-2020-6287_find_mandate	POC Details
7	Automated Exploit for CVE-2020-6287	https://github.com/dylvie/CVE-2020-6287_SAP-NetWeaver-bypass-auth	POC Details
8	A simple workflow that runs all SAP NetWaver related nuclei templates on a given target.	https://github.com/projectdiscovery/nuclei-templates/blob/main/workflows/sap-netweaver-workflow.yaml	POC Details
9	SAP NetWeaver AS JAVA (LM Configuration Wizard), versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system.	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6287.yaml	POC Details

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2020-6287

请登录查看更多情报信息。

Mailing List Discussions for CVE-2020-6287 (1)

http://seclists.org/fulldisclosure/2021/Apr/6 mailing-list x_refsource_FULLDISC

Other References for CVE-2020-6287 (2)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675 x_refsource_MISC
https://www.onapsis.com/recon-sap-cyber-security-vulnerability x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2020-6287

Same Patch Batch · SAP SE · 2020-07-14 · 13 CVEs total

CVE-2020-6267		SAP Disclosure Management 跨站脚本漏洞
CVE-2020-6276		SAP Business Objects Business Intelligence Platform 跨站脚本漏洞
CVE-2020-6278		SAP Business Objects Business Intelligence Platform 跨站脚本漏洞
CVE-2020-6280		SAP NetWeaver AS ABAP和ABAP Platform 信息泄露漏洞
CVE-2020-6281		SAP Business Objects Business Intelligence Platform 跨站脚本漏洞
CVE-2020-6282		SAP NetWeaver AS JAVA 代码问题漏洞
CVE-2020-6285		SAP NetWeaver-XML Toolkit for JAVA 信息泄露漏洞
CVE-2020-6286		SAP NetWeaver AS JAVA 路径遍历漏洞
CVE-2020-6289		SAP Disclosure Management 跨站请求伪造漏洞
CVE-2020-6290		SAP Disclosure Management 授权问题漏洞
CVE-2020-6291		SAP Disclosure Management 代码问题漏洞
CVE-2020-6292		SAP Disclosure Management 代码问题漏洞

IV. Related Vulnerabilities

Same product: SAP NetWeaver AS JAVA (LM Configuration Wizard)

CVE-2020-6286
SAP NetWeaver AS JAVA 路径遍历漏洞

Same vendor: SAP SE

V. Comments for CVE-2020-6287

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-6287

Quick assessment

Public Exploits 2

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2020-6287

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2020-6287

III. Intelligence Information for CVE-2020-6287

Mailing List Discussions for CVE-2020-6287 (1)

Other References for CVE-2020-6287 (2)

Same Patch Batch · SAP SE · 2020-07-14 · 13 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2020-6287

Leave a comment