SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2023-03049)

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence (BI) products to eliminate system integration challenges and enable fast and easy deployment of high-performance business analytics software. The vulnerability stems from the fact that some of its calls return json of the wrong content type in the response header, which can be exploited by attackers to make custom applications that directly call the Web Intelligence DHTML jsp potentially vulnerable to cross-site scripting attacks.