Description (CNA)
SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and it will be executed while search performs its action, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP BusinessObjects Business Intelligence Platform (Info View) | affected < 4.1; affected < 4.2; affected < 4.3 |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/2742468
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017
ADP enrichment
No English description supplied.