CVE-2023-30741: Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30741?
The severity of CVE-2023-30741 is medium, with a severity value of 6.1.
How can an unauthenticated attacker exploit CVE-2023-30741?
An unauthenticated attacker can exploit CVE-2023-30741 by redirecting users to an untrusted site using a malicious link.
What is the impact of successful exploitation of CVE-2023-30741?
The successful exploitation of CVE-2023-30741 can allow an attacker to view or modify information, causing a limited impact.
Which versions of SAP BusinessObjects Business Intelligence Platform are affected by CVE-2023-30741?
Versions 4.20 and 4.30 of SAP BusinessObjects Business Intelligence Platform are affected by CVE-2023-30741.
Where can I find more information about CVE-2023-30741?
You can find more information about CVE-2023-30741 at the following references: [Reference 1](https://launchpad.support.sap.com/#/notes/3309935), [Reference 2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html)