CVE-2020-6219

Katalog CVE

CVSS 8.8 · High EPSS 1,3%

Kerentanan Deserialization of Untrusted Data pada sap businessobjects business intelligence platform, sap crystal reports for visual studio. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

SAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service and unauthorized execution of arbitrary commands, leading to Deserialization of Untrusted Data.

Rincian

Terbit di NVD

14 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://launchpad.support.sap.com/#/notes/2863731 permissions required · advisory vendor
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 advisory vendor