CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-6269
https://notcve.org/view.php?id=CVE-2020-6269
Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure. En determinadas condiciones, SAP Business Objects Business Intelligence Platform, versión 4.2, permite a un atacante acceder a información que de otro modo estaría restringida, conllevando a una divulgación de información • https://launchpad.support.sap.com/#/notes/2905836 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775 •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2020-6257
https://notcve.org/view.php?id=CVE-2020-6257
SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. SAP Business Objects Business Intelligence Platform (CMC y BI Launchpad) versión 4.2, no codifica suficientemente las entradas controladas por el usuario, resultando en una vulnerabilidad de tipo Cross-Site Scripting. • https://launchpad.support.sap.com/#/notes/2907781 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-6251
https://notcve.org/view.php?id=CVE-2020-6251
Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted. Bajo determinadas condiciones o escenarios de error, SAP Business Objects Business Intelligence Platform, versión 4.2, permite a un atacante acceder a información que de otro modo estaría restringida. • https://launchpad.support.sap.com/#/notes/2828558 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-6247
https://notcve.org/view.php?id=CVE-2020-6247
SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitimate users from accessing a service. Using a specially crafted request, the attacker can crash or flood the Central Management Server, thereby impacting system availability. SAP Business Objects Business Intelligence Platform, versión 4.2, permite a un atacante no autenticado impedir a usuarios legítimos acceder a un servicio. Usando una petición especialmente diseñada, el atacante puede bloquear o inundar el Central Management Server, por lo tanto impacta la disponibilidad del sistema. • https://launchpad.support.sap.com/#/notes/2828558 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 •
CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 0CVE-2020-6245
https://notcve.org/view.php?id=CVE-2020-6245
SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Control of Resource Identifiers. SAP Business Objects Business Intelligence Platform, versión 4.2, permite a un atacante con acceso a la instancia local inyectar un archivo o código que puede ser ejecutado por la aplicación debido a un Control Inapropiado de los Identificadores de Recursos. • https://launchpad.support.sap.com/#/notes/2828558 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-99: Improper Control of Resource Identifiers ('Resource Injection') •