CVE-2023-42478: Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42478?
CVE-2023-42478 has a high severity level due to its potential impact on the integrity of the SAP Business Objects Business Intelligence Platform.
How do I fix CVE-2023-42478?
To mitigate CVE-2023-42478, apply the latest security patches provided by SAP for versions 420 and 430 of the Business Objects Business Intelligence Platform.
What types of attacks are possible with CVE-2023-42478?
CVE-2023-42478 allows for stored XSS attacks, enabling attackers to upload malicious documents that execute scripts when opened by other users.
Who is affected by CVE-2023-42478?
CVE-2023-42478 affects users of SAP Business Objects Business Intelligence Platform versions 420 and 430.
Is there a workaround for CVE-2023-42478?
Currently, the recommended approach for CVE-2023-42478 is to apply the security updates from SAP to prevent potential exploitation.