CVE-2020-6211

CWE-601 — Open Redirect3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.2%
top 55.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Business Objects Business Intelligence PlatformSAP Businessobjects Business Intelligence Platform
Timeline
PublishedApr 14
Latest updateMay 24

Description

SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-jqh3-p48c-4xxc: SAP Business Objects Business Intelligence Platform (AdminTools), versions 4↗2022-05-24
▶
CVEList
CVE-2020-6211: SAP Business Objects Business Intelligence Platform (AdminTools), versions 4↗2020-04-14
▶
CVE-2020-6211 (MEDIUM CVSS 6.1) | SAP Business Objects Business Intel | cvebase.io