Cross site scripting

2020-07-1413:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resulting reflected in Cross-Site Scripting.

CPENameOperatorVersion
businessobjects_business_intelligence_platformeq4.2

CPE	Name	Operator	Version
	businessobjects_business_intelligence_platform	eq	4.2

References

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675