Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-28165

Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

Description

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Business Intelligence Platform

Default version status: unaffected

  • 430affected
  • 440affected

References