← back
CVE-2020-6245

CVE-2020-6245

CVSS 6.5 MEDIUMEPSS 0.3%CWE-99
SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Control of Resource Identifiers.
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
SAP SE · SAP Business Objects Business Intelligence Platform

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://launchpad.support.sap.com/#/notes/2828558https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222