CVE-2020-6263: 
SAP NetWeaver Application Server Java vulnerability analysis and mitigation

A vulnerability was identified in SAP NetWeaver AS Java affecting standalone clients connecting via P4 Protocol. The vulnerability (CVE-2020-6263) affects multiple versions including SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10-7.50; and CORE-TOOLS 7.00-7.50. The issue was discovered and assigned on January 8, 2020, with details being enriched in the NVD database by June 2020 (CVE Details).

The vulnerability stems from a failure to perform authentication checks for operations that require user identity when standalone clients connect to SAP NetWeaver AS Java through the P4 Protocol. This authentication bypass vulnerability affects multiple components and versions of the SAP system (CVE Details).

The vulnerability allows for authentication bypass in affected SAP NetWeaver AS Java systems, potentially enabling unauthorized access to operations that should require user identity verification (CVE Details).

SAP has addressed this vulnerability through security notes and patches available through the SAP support portal (SAP Note, SAP Wiki).