CVE-2023-42478: Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
First published: Tue Dec 12 2023(Updated: )
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Business Objects Business Intelligence Platform | =420 | |
| SAP Business Objects Business Intelligence Platform | =430 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-api
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/title
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap business objects business intelligence platform
- version/sap business objects business intelligence platform/420
- version/sap business objects business intelligence platform/430