Security Advisory

CVE-2020-6278

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-14 12:30:14
Last updated 2024-08-04 08:55:22
Assigner sap
State PUBLISHED

Description

SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC), versions 4.1, 4.2, allows to an attacker to embed malicious scripts in the application while uploading images, which gets executed when the victim opens these files, leading to Stored Cross Site Scripting