CVE-2018-2397: XSS
Published Mar 14, 2018
·Updated
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
Affected Software
4 affected components
SAP BusinessObjects Business Intelligence platform=4.00
SAP BusinessObjects Business Intelligence platform=4.10
SAP BusinessObjects Business Intelligence platform=4.20
SAP BusinessObjects Business Intelligence platform=4.30
Event History
Mar 14, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-2397?
CVE-2018-2397 is classified as a medium severity vulnerability.
2
How do I fix CVE-2018-2397?
To fix CVE-2018-2397, apply the latest security updates provided by SAP for Business Intelligence Platform.
3
What type of vulnerability is CVE-2018-2397?
CVE-2018-2397 is a Cross-Site Scripting (XSS) vulnerability.
4
Which versions of SAP Business Objects are affected by CVE-2018-2397?
CVE-2018-2397 affects SAP Business Objects Business Intelligence Platform versions 4.00, 4.10, 4.20, and 4.30.
5
What does CVE-2018-2397 exploit?
CVE-2018-2397 exploits insufficient encoding of user-controlled inputs in the Central Management Console.