What’s Vulnerable › Vulnerabilities

CVE-2020-6242

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-12 · updated 2026-06-17
• Weakness: CWE-306

Description

SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without password in case of the BIPRWS application server was not protected with some specific certificate, leading to Missing Authentication Check.

Affected products

• SAP_SE SAP BusinessObjects Business Intelligence Platform: 1.0, 2.0, 2.1, 2.2, 2.3

References

• https://launchpad.support.sap.com/#/notes/2885244
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://launchpad.support.sap.com/#/notes/2885244
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222

Get alerted when CVE-2020-6242 or the next vulnerability affects your stack