SAP BusinessObjects Business Intelligence Platform CMC application cross-site scripting vulnerability

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence (BI) products to eliminate system integration challenges and enable fast and easy deployment of high-performance business analytics software. A cross-site scripting vulnerability exists in versions 420 and 430 due to improper input sanitization of user-controlled input, which can be exploited by an attacker with basic user-level privileges to modify/upload crystal reports containing malicious payloads.