What is CVE-2020-6227?

CVE-2020-6227 is a high-severity vulnerability in Sap Businessobjects Business Intelligence Platform, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2020-04-14.

How severe is CVE-2020-6227?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Sap Businessobjects Business Intelligence Platform

CVE-2020-6227

SAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows attacker to send specially crafted GIOP packets to several services due to Improper Input Validation, allowing to forge additional entries in GLF log files.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.009 (54.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Sap Businessobjects_business_intelligence_platform — versions 4.2
Sap Se Business Objects Intelligence Platform (Cms / Auditing Issues) — versions < 4.2

Weakness classification (CWE)

References

cna@sap.com (x_refsource_MISC, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-6227?: CVE-2020-6227 is a high-severity vulnerability in Sap Businessobjects Business Intelligence Platform, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2020-04-14.
How severe is CVE-2020-6227?: High severity. CVSS v3 base score is 7.5 out of 10.