CVE-2026-27683 — Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

CVE-2026-27683

Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform PUBLISHED

Description (CNA)

SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user�s browser, potentially exposing restricted information. This results in a low impact on confidentiality with no impact on integrity and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP BusinessObjects Business Intelligence Platform	affected ENTERPRISE 430; affected 2025; affected 2027

CWE

CWE-79

References

https://me.sap.com/notes/3698216
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.