SAP SE SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface)

• CVE-2020-6288 Medium 4.6 SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit document rights to upload any file (including script files) without proper file forma 0.7%
• CVE-2020-6226 Medium 5.4 SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnera 0.6%
• CVE-2020-6231 Medium 5.4 SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnera 0.6%