CVE-2020-6243: 
SAP Adaptive Server Enterprise vulnerability analysis and mitigation

CVE-2020-6243 is a security vulnerability affecting SAP Adaptive Server Enterprise (ASE) versions 15.7 and 16.0, specifically the XP Server component on Windows Platform. The vulnerability was disclosed and patched in May 2020. The flaw exists when the server does not perform necessary checks for an authenticated user while executing extended stored procedures (SAP Note, Hacker News).

The vulnerability is classified as a code injection flaw with a CVSS v3.1 base score of 8.8 (HIGH) according to NVD, while SAP SE rated it with a CVSS v3.0 score of 8.0 (HIGH). The vulnerability specifically affects the execution of extended stored procedures in the XP Server component, where insufficient security checks allow for potential code injection attacks (NVD, Bleeping Computer).

When successfully exploited, this vulnerability allows an authenticated attacker to read, modify, and delete restricted data on connected servers. The attacker could potentially execute arbitrary code with LocalSystem privileges on the Windows platform (Threatpost, Hacker News).

The vulnerability requires authentication and can be exploited by Windows users who can connect to the SAP ASE server. The attack complexity is rated as low, requiring no user interaction for exploitation (NVD, Threatpost).

SAP addressed this vulnerability in their May 2020 security patch update. Users are strongly recommended to apply the patches for both ASE 15.7 and 16.0 versions immediately. The fix was released on May 12, 2020 (Bleeping Computer, Hacker News).