Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-42474

Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence

Description

SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Web Intelligence

Default version status: unaffected

  • 420affected

References