CVE-2020-6220

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. Exploit is possible only when the bttoken in victim’s session is active...

CVE-2020-6220

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. Exploit is possible only when the bttoken in victim’s session is active...

CVE-2020-6220

The CVE-2020-6220 issue affects SAP BusinessObjects BI Platform, specifically BI Launchpad and CMC, versions 4.1 and 4.2. Affected component(s) are parts that process user input, where insufficient encoding of user-controlled inputs leads to a Cross‑Site Scripting (XSS) vulnerability. The exploit...