CVE-2020-6216: XSS

Published Apr 14, 2020

Updated

SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Affected Software

1 affected component

SAP BusinessObjects Business Intelligence platform=4.2

Event History

Apr 14, 2020

CVE Published

via MITRE·06:07 PM

Data Sourced

via MITRE·06:07 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-6216?

CVE-2020-6216 is a Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform (BI Launchpad) version 4.2.

How does CVE-2020-6216 affect SAP Business Objects Business Intelligence Platform?

CVE-2020-6216 allows an attacker to perform reflected Cross-Site Scripting (XSS) attacks on the BI Launchpad 4.2, potentially compromising user data and session information.

What is the severity of CVE-2020-6216?

CVE-2020-6216 has a severity rating of medium with a CVSS score of 6.1.

How do I fix CVE-2020-6216 in SAP Business Objects Business Intelligence Platform?

To fix CVE-2020-6216, it is recommended to apply the latest patch or update provided by SAP Business Objects to address the Cross-Site Scripting vulnerability.

Where can I find more information about CVE-2020-6216?

More information about CVE-2020-6216 can be found in the SAP support notes at https://launchpad.support.sap.com/#/notes/2876059 and the SAP Community Network wiki at https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202.