CVE-2020-6223: Medium severity SAP BusinessObjects Business Intelligence platform vulnerability

Published Apr 14, 2020

Updated

The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user who is tricked into accessing these error pages rendered by the application, leading to Content Spoofing.

Affected Software

2 affected components

SAP BusinessObjects Business Intelligence platform=4.1

SAP BusinessObjects Business Intelligence platform=4.2

Event History

Apr 14, 2020

CVE Published

via MITRE·06:07 PM

Data Sourced

via MITRE·06:07 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID is CVE-2020-6223.

What is the severity of CVE-2020-6223?

The severity of CVE-2020-6223 is medium (6.1).

Which versions of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6223?

Versions 4.1 and 4.2 of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6223.

What is the impact of CVE-2020-6223?

CVE-2020-6223 can misdirect a user who is tricked into accessing error pages rendered by the application, leading to Content Spoofing.

Are there any references available for more information about CVE-2020-6223?

Yes, for more information about CVE-2020-6223, you can refer to the following links: [Link 1](https://launchpad.support.sap.com/#/notes/2878507), [Link 2](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202).