SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application.
References
| Link | Resource |
|---|---|
| https://me.sap.com/notes/3382353 | Permissions Required |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Dec 2023, 23:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:* cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:* |
|
| References | () https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory | |
| References | () https://me.sap.com/notes/3382353 - Permissions Required | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.6 |
| First Time |
Sap
Sap business Objects Business Intelligence Platform |
12 Dec 2023, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-12 01:15
Updated : 2023-12-13 23:23
NVD link : CVE-2023-42478
Mitre link : CVE-2023-42478
JSON object : View
Products Affected
sap
- business_objects_business_intelligence_platform
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')