Description (CNA)
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Business Objects Business Intelligence Platform | affected 4.00; affected 4.10; affected 4.20; affected 4.30 |
CWE
No CWE identifiers supplied.
References
- https://blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/
- https://launchpad.support.sap.com/#/notes/2550538
- http://www.securityfocus.com/bid/103373
ADP enrichment
No English description supplied.