CVE-2020-6223
The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user who is tricked into accessing these error pages rendered by the application, leading to Content Spoofing.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cna@sap.com
- Published
- 2020-04-14
- Last modified
- 2024-08-04
- Weaknesses
- CWE-601
Affected products
- Businessobjects Business Intelligence Platform (Sap)
- Sap Business Objects Business Intelligence Platform (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2878507
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
