CVE-2020-6300
SAP Business Objects Business Intelligence Platform (Central Management Console), versions- 4.2, 4.3, allows an attacker with administrator rights can use the web application to send malicious code to a different end user (victim), as it does not sufficiently encode user-controlled inputs for RecycleBin, resulting in Stored Cross-Site Scripting (XSS) vulnerability.
- Score
- CVSS 3.1 4.8 Medium
- Status
- Modified - cna@sap.com
- Published
- 2020-08-12
- Last modified
- 2024-08-04
- Weaknesses
- CWE-79
Affected products
- Businessobjects Business Intelligence Platform (Sap)
- Sap Business Objects Business Intelligence Platform Central Management Console (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2925827
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345
