CVE-2020-6308
mediumpriority · attend · 53EPSS 0.617 · 99 %ileexploit · PoCEUUSEPSS · scored 2026-10-27
SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker can scan internal network to determine internal infrastructure and gather information for further attacks like remote file inclusion, retrieve server files, bypass firewall and force the vulnerable server to perform malicious requests, resulting in a Server-Side Request Forgery vulnerability.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (4)
Public proof-of-concept and weaponised exploit code.
- InitRoot/CVE-2020-6308-PoCPoC CVE-2020-6308PoC · poc_in_github
- TheMMMdev/CVE-2020-6308Exploit script for SAP Business Objects SSRFPoC · poc_in_github
- freeFV/CVE-2020-6308-mass-exploiterCVE-2020-6308 mass exploiter/fuzzer.PoC · poc_in_github
affected products (6)
Products and version ranges known to be affected.
- sap businessobjects business intelligence platform= 4.1nvdUScpe:2.3:a:sap:businessobjects_business_intelligence_platform:*:*:*:*:*:*:*:*
- sap businessobjects business intelligence platform= 4.2nvdUScpe:2.3:a:sap:businessobjects_business_intelligence_platform:*:*:*:*:*:*:*:*
- sap businessobjects business intelligence platform= 4.3nvdUScpe:2.3:a:sap:businessobjects_business_intelligence_platform:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- http://www.nsfocus.net/vulndb/50285cnnvd
- https://launchpad.support.sap.com/#/notes/2943844cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-6308cnnvd
- https://vigilance.fr/vulnerability/SAP-multiple-vulnerabilities-of-October-2020-33549cnnvd
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196cnnvd
- https://launchpad.support.sap.com/#/notes/2943844enisa_euvd
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196enisa_euvd
- https://launchpad.support.sap.com/#/notes/2943844Permissions RequiredVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan