CVE-2019-0269: XSS

Published Mar 12, 2019

Updated

SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected Software

2 affected components

SAP BusinessObjects Business Intelligence=4.10

SAP BusinessObjects Business Intelligence=4.20

Event History

Mar 12, 2019

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-0269?

CVE-2019-0269 is a Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (BI Workspace) versions 4.10 and 4.20.

What is the severity of CVE-2019-0269?

The severity of CVE-2019-0269 is rated as medium with a CVSS score of 5.4.

How does CVE-2019-0269 impact SAP BusinessObjects Business Intelligence Platform?

CVE-2019-0269 allows an attacker to execute malicious scripts in the context of the user's browser, potentially leading to information theft or unauthorized actions.

How can I fix CVE-2019-0269?

To fix CVE-2019-0269, it is recommended to apply the necessary security patches or updates provided by SAP.

Where can I find more information about CVE-2019-0269?

You can find more information about CVE-2019-0269 in the references provided: [SecurityFocus](http://www.securityfocus.com/bid/107359), [SAP Note](https://launchpad.support.sap.com/#/notes/2693962), [SAP Wiki](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080).