CVE-2020-6366

CVE-2020-6366 is a medium-severity vulnerability affecting SAP NetWeaver (Compare Systems) versions 7.20, 7.30, 7.40, and 7.50, stemming from insufficient validation of uploaded XML documents. An attacker with administrative privileges can exploit this to retrieve arbitrary files, including OS-level files, or execute a denial-of-service attack. The CVSS score is 6.5, indicating network-based attacks with low complexity, high confidentiality impact, and high availability impact. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage beyond a single article.