CVE-2020-6219
First published: Tue Apr 14 2020(Updated: )
SAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service and unauthorized execution of arbitrary commands, leading to Deserialization of Untrusted Data.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Businessobjects Business Intelligence Platform | =4.1 | |
| Sap Businessobjects Business Intelligence Platform | =4.2 | |
| Sap Crystal Reports For Visual Studio | =2010 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SAP Business Objects Business Intelligence Platform vulnerability?
The vulnerability ID for this SAP Business Objects Business Intelligence Platform vulnerability is CVE-2020-6219.
What is the severity rating for CVE-2020-6219?
CVE-2020-6219 has a severity rating of 8.8, which is considered critical.
Which versions of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6219?
Versions 4.1 and 4.2 of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6219.
Which version of Crystal Reports for VS is affected by CVE-2020-6219?
Crystal Reports for VS version 2010 is affected by CVE-2020-6219.
How can an attacker exploit CVE-2020-6219?
An attacker with basic authorization can perform a deserialization attack in the application, leading to service interruptions and denial of service.
Are there any references for CVE-2020-6219?
Yes, you can refer to the following links for more information: - [SAP Note 2863731](https://launchpad.support.sap.com/#/notes/2863731) - [SAP Wiki](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202)
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/event
- vendor/sap
- canonical/sap businessobjects business intelligence platform
- version/sap businessobjects business intelligence platform/4.1
- version/sap businessobjects business intelligence platform/4.2
- canonical/sap crystal reports for visual studio
- version/sap crystal reports for visual studio/2010