← CVE Intelligence

CVE-2024-28165

Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform PUBLISHED

Description (CNA)

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP BusinessObjects Business Intelligence Platformaffected 430; affected 440

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.