VULNERABILITY INTELLIGENCE

CVE-2020-6245

CVSS score6.7 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2020-05-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Control of Resource Identifiers.

Weakness classification

  • cna@sap.com: CWE-99
  • nvd@nist.gov: CWE-74

Primary references