CVE-2020-6219: High severity SAP BusinessObjects Business Intelligence platform vulnerability
SAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service and unauthorized execution of arbitrary commands, leading to Deserialization of Untrusted Data.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SAP Business Objects Business Intelligence Platform vulnerability?
The vulnerability ID for this SAP Business Objects Business Intelligence Platform vulnerability is CVE-2020-6219.
What is the severity rating for CVE-2020-6219?
CVE-2020-6219 has a severity rating of 8.8, which is considered critical.
Which versions of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6219?
Versions 4.1 and 4.2 of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6219.
Which version of Crystal Reports for VS is affected by CVE-2020-6219?
Crystal Reports for VS version 2010 is affected by CVE-2020-6219.
How can an attacker exploit CVE-2020-6219?
An attacker with basic authorization can perform a deserialization attack in the application, leading to service interruptions and denial of service.
Are there any references for CVE-2020-6219?
Yes, you can refer to the following links for more information: - [SAP Note 2863731](https://launchpad.support.sap.com/#/notes/2863731) - [SAP Wiki](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202)