CVE-2020-6211

published 2020-04-14

CVE-2020-6211: SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects_business_intelligence_platform	—	—
sap	businessobjects_business_intelligence_platform	—	—
sap_se	sap_business_objects_business_intelligence_platform	< 4.1	4.1
sap_se	sap_business_objects_business_intelligence_platform	< 4.2	4.2

CWE-601