Beveiligingsadvies

CVE-2020-6300

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-08-12 13:45:02
Laatst bijgewerkt 2024-08-04 08:55:22
Toegewezen door sap
CVSS-score 4.8
Status PUBLISHED

Beschrijving

SAP Business Objects Business Intelligence Platform (Central Management Console), versions- 4.2, 4.3, allows an attacker with administrator rights can use the web application to send malicious code to a different end user (victim), as it does not sufficiently encode user-controlled inputs for RecycleBin, resulting in Stored Cross-Site Scripting (XSS) vulnerability.