CVE-2020-6230: 
Homebrew vulnerability analysis and mitigation

SAP OrientDB version 3.0 contains a code injection vulnerability (CVE-2020-6230) that was disclosed on April 14, 2020. The vulnerability allows an authenticated attacker with script execute/write permissions to inject and execute malicious code within the application, potentially controlling its behavior (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.2 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. SAP SE has rated it as CRITICAL with a CVSS score of 9.1 and vector string CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. The vulnerability requires high privileges but no user interaction for exploitation (NVD).

If successfully exploited, this vulnerability allows an attacker to execute arbitrary code within the application context. This could lead to complete compromise of the system's confidentiality, integrity, and availability through unauthorized code execution (NVD).

The vulnerability requires an authenticated user with script execute/write permissions to exploit. The attack complexity is rated as low, indicating that the attack can be performed with relative ease once the required privileges are obtained (NVD).

SAP has released security patches to address this vulnerability. Users are advised to refer to SAP Security Note 2900118 for detailed mitigation instructions (SAP Note).