PT-2020-19024
CVE-2020-6226
·
تاريخ النشر
2020-04-14
·
تاريخ التحديث
2020-04-15
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) version 4.2
Description
The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability. This allows for potential malicious script execution.
Recommendations
For SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) version 4.2, consider implementing proper input encoding to prevent XSS attacks. As a temporary workaround, restrict access to the Web Intelligence HTML interface until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾