PT-2020-19069

CVE-2020-6276

Published

2020-07-14

Updated

2020-07-14

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform version 4.2

Description The issue is related to insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting problem.

Recommendations For version 4.2, update to a version that includes the fix for this issue to prevent Cross-Site Scripting attacks.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾