First published: Tue Mar 12 2019(Updated: )
SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Credit: cna@sap.com
Affected Software | Affected Version | How to fix |
---|---|---|
SAP BusinessObjects Business Intelligence | =4.10 | |
SAP BusinessObjects Business Intelligence | =4.20 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-0269 is a Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (BI Workspace) versions 4.10 and 4.20.
The severity of CVE-2019-0269 is rated as medium with a CVSS score of 5.4.
CVE-2019-0269 allows an attacker to execute malicious scripts in the context of the user's browser, potentially leading to information theft or unauthorized actions.
To fix CVE-2019-0269, it is recommended to apply the necessary security patches or updates provided by SAP.
You can find more information about CVE-2019-0269 in the references provided: [SecurityFocus](http://www.securityfocus.com/bid/107359), [SAP Note](https://launchpad.support.sap.com/#/notes/2693962), [SAP Wiki](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080).