CVE-2020-6219

Опубликовано: 14 апр. 2020

Источник: nvd

CVSS3: 9.1

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

SAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service and unauthorized execution of arbitrary commands, leading to Deserialization of Untrusted Data.

Ссылки

https://launchpad.support.sap.com/#/notes/2863731
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
Vendor Advisory
https://launchpad.support.sap.com/#/notes/2863731
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.1:-:*:*:*:*:*:*

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.2:-:*:*:*:*:*:*

cpe:2.3:a:sap:crystal_reports_for_visual_studio:2010:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01258

Низкий

9.1 Critical

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-502

Связанные уязвимости

GHSA-54q6-x68f-358m

github

больше 3 лет назад

EPSS

Процентиль: 79%

0.01258

Низкий

9.1 Critical

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-502