CVE-2020-6257

CVE-2020-6257 affects SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2. The vulnerability stems from insufficient encoding of user-controlled inputs, leading to Cross-Site Scripting. The connected documents corroborate this across multiple sources (NVD, Red Hat, CNVD...

CVE-2020-6257

SAP Business Objects Business Intelligence Platform CMC and BI Launchpad 4.2 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability...

CVE-2020-6251

Technical details about CVE-2020-6251 are not publicly available in the provided documents; no concrete affected products, versions, or remediation are specified. Monitor for updates.

CVE-2020-6251

Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted...

CVE-2020-6247

SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitimate users from accessing a service. Using a specially crafted request, the attacker can crash or flood the Central Management Server, thereby impacting system availability...

CVE-2020-6247

CVE-2020-6247 affects SAP Business Objects BI Platform, version 4.2. An unauthenticated attacker can send specially crafted requests to crash or flood the Central Management Server, impacting system availability. The available connected documents corroborate the impact (availability disruption) a...

CVE-2020-6245

SAP Business Objects Business Intelligence Platform 4.2 is affected by CVE-2020-6245, where an attacker with local access can inject a file or code that the application executes due to Improper Control of Resource Identifiers. The condition allows local, low-attack-skill exploitation that can lea...

CVE-2020-6245

SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Control of Resource Identifiers...

.NET Framework Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by...

Windows Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Windows Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

Windows Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Windows State Repository Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a...

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

Windows Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an attacker who has a domain user accou...

CVE-2020-6245: Improper Control of Resource Identifiers

SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Control of Resource Identifiers...

PT-2020-2817

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in DirectX, which occurs due to improper handling of objects in memory. This could allow an attacker to elevate their privilege...

PT-2020-12579

Name of the Vulnerable Software and Affected Versions Windows Client Server Run-Time Subsystem CSRSS affected versions not specified Description An information disclosure issue exists due to the improper handling of objects in memory by the Windows Client Server Run-Time Subsystem CSRSS. This...