CVE-2020-6202: 
SAP NetWeaver Application Server Java vulnerability analysis and mitigation

SAP NetWeaver Application Server Java (User Management Engine) versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 contains a vulnerability related to insufficient validation of LDAP data source configuration XML documents from untrusted sources, leading to Missing XML Validation (AttackerKB).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.2 (High), with an Impact Score of 5.9 and Exploitability Score of 1.2. The attack vector is Network-based with Low attack complexity, requiring High privileges and No user interaction. The scope is Unchanged, with High impact on Confidentiality, Integrity, and Availability (AttackerKB).

If successfully exploited, this vulnerability could lead to high impacts on system confidentiality, integrity, and availability. The CVSS metrics indicate potential for significant system compromise, though the high privileges required for exploitation may limit the practical impact (AttackerKB).