Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-100007
HistoryDec 14, 2023 - 12:00 a.m.

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2023-10000797)

2023-12-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
sap
business intelligence
cross-site scripting
vulnerability
filtering
user-supplied data
agnostic documents

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

16.0%

SAP Business Objects is a business intelligence suite from SAP, Germany. A cross-site scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform 420 version 430, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to upload agnostic documents in the system.

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

16.0%

Related for CNVD-2023-100007