CVE-2004-0534: XSS
First published: Fri Sep 17 2004(Updated: )
Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP BusinessObjects | =5.1.8 | |
| SAP BusinessObjects Web Intelligence | =2.7 | |
| SAP BusinessObjects Web Intelligence | =2.7.3 | |
| SAP BusinessObjects | =5.1.6 | |
| SAP BusinessObjects Web Intelligence | =2.7.2 | |
| SAP BusinessObjects | =5.1.5 | |
| SAP BusinessObjects | =5.1.4 | |
| SAP BusinessObjects Web Intelligence | =2.7.1 | |
| SAP BusinessObjects Web Intelligence | =2.7.4 | |
| SAP BusinessObjects | =5.1.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-0534?
CVE-2004-0534 is considered a medium severity vulnerability due to its ability to allow cross-site scripting attacks.
How do I fix CVE-2004-0534?
To fix CVE-2004-0534, upgrade to a version of SAP BusinessObjects InfoView and Web Intelligence that is not affected, typically version 5.1.9 or later.
What products are affected by CVE-2004-0534?
CVE-2004-0534 affects SAP BusinessObjects InfoView versions 5.1.4 to 5.1.8 and SAP BusinessObjects Web Intelligence versions 2.7.0 to 2.7.4.
Can CVE-2004-0534 be exploited remotely?
Yes, CVE-2004-0534 can be exploited remotely by injecting malicious scripts via document names during the upload process.
What is the impact of CVE-2004-0534?
The impact of CVE-2004-0534 includes potential unauthorized access to user sessions and stealing sensitive information through cross-site scripting.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/businessobjects
- canonical/sap businessobjects
- version/sap businessobjects/5.1.8
- canonical/sap businessobjects web intelligence
- version/sap businessobjects web intelligence/2.7
- version/sap businessobjects web intelligence/2.7.3
- version/sap businessobjects/5.1.6
- version/sap businessobjects web intelligence/2.7.2
- version/sap businessobjects/5.1.5
- version/sap businessobjects/5.1.4
- version/sap businessobjects web intelligence/2.7.1
- version/sap businessobjects web intelligence/2.7.4
- version/sap businessobjects/5.1.7