4 matches found
CVE-2020-6308
SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker c...
5.3CVSS7AI score0.61736EPSS
SaveExploits3References1
Exploit for Server-Side Request Forgery in Sap Businessobjects_Business_Intelligence_Platform
CVE-2020-6308 Exploit script for SAP Business Objects SSRF Th...
5.3CVSS5.9AI score0.61736EPSS
SaveExploits3
Arbitrary Code Injection Over HTTP Traffic (CVE-2020-21176; CVE-2020-25042; CVE-2020-26248; CVE-2020-26712; CVE-2020-28994; CVE-2020-29284; CVE-2020-6308; CVE-2021-25912)
Arbitrary Code Injections Over HTTP Traffic...
10CVSS1AI score0.61736EPSS
SaveExploits15
20