CVE-2018-2479: XSS

Published Nov 13, 2018

Updated

SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected Software

2 affected components

SAP BusinessObjects BI Platform=4.1

SAP BusinessObjects BI Platform=4.2

Event History

Nov 13, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-2479?

CVE-2018-2479 has a moderate severity rating due to its potential for exploitation through Cross-Site Scripting.

How do I fix CVE-2018-2479?

To fix CVE-2018-2479, apply the latest patches provided by SAP for BusinessObjects BI Platform versions 4.1 and 4.2.

What types of applications are affected by CVE-2018-2479?

CVE-2018-2479 affects the SAP BusinessObjects Business Intelligence Platform specifically in versions 4.1 and 4.2.

What exploit type is associated with CVE-2018-2479?

CVE-2018-2479 is associated with Cross-Site Scripting (XSS) vulnerabilities that allow attackers to inject arbitrary scripts.

Can CVE-2018-2479 affect user data?

Yes, CVE-2018-2479 can potentially expose user data to unauthorized access through exploitation of the XSS vulnerability.