Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-6227

SAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows attacker to send specially crafted GIOP packets to several services due to Improper Input Validation, allowing to forge additional entries in GLF log files.

Published

2020-04-14T19:15:17.670

Last Modified

2024-11-21T05:35:20.383

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
    CWE-116
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap businessobjects_business_intelligence_platform 4.2 Yes
References