CVE-2020-6247 MEDIUM

CVE-2020-6247

Vendor Sap Se
Product SAP Business Objects Business Intelligence Platform
Published May 12, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitimate users from accessing a service. Using a specially crafted request, the attacker can crash or flood the Central Management Server, thereby impacting system availability.

Key dates

02Disclosure timeline

May 12, 2020 CVE published
August 4, 2024 Record updated