Vulnerability · Published Sep 9, 2020 · Assigned by sap

CVE-2020-6288

Medium 4.6

In plain English

A medium-severity unrestricted file upload in SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) from SAP SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 3.0)4.6Medium

Exploit odds (30 days)0.7%top 48.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit document rights to upload any file (including script files) without proper file format validation leading to Unrestricted upload of file with dangerous type vulnerability. The attacker can modify some formulas and display erroneous content. The server is not affected only the current user browser session, that can easily be closed.

Affected products (as reported)

Vendor	Product	Versions
SAP SE	SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface)	< 4.1< 4.2

Weakness: CWE-434 · Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2930128 x_refsource_MISC