CVE-2024-28165: Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28165?
CVE-2024-28165 has a high severity as it allows stored XSS which can threaten the confidentiality and integrity of the SAP Business Objects Business Intelligence Platform.
How do I fix CVE-2024-28165?
To fix CVE-2024-28165, apply the latest security patches provided by SAP for the Business Objects Business Intelligence Platform.
What are the risks associated with CVE-2024-28165?
The risks associated with CVE-2024-28165 include potential unauthorized access to sensitive data and manipulation of application functionality through XSS attacks.
Which versions of the software are affected by CVE-2024-28165?
CVE-2024-28165 affects the SAP BusinessObjects Business Intelligence Platform due to its vulnerability to stored XSS.
Who is affected by CVE-2024-28165?
Organizations using the SAP Business Objects Business Intelligence Platform can be affected by CVE-2024-28165 due to the stored XSS vulnerability.