Lucene search

K
cvelistSapCVELIST:CVE-2019-0332
HistoryAug 14, 2019 - 1:44 p.m.

CVE-2019-0332

2019-08-1413:44:00
sap
www.cve.org

0.001 Low

EPSS

Percentile

36.3%

SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and it will be executed while search performs its action, resulting in Cross-Site Scripting (XSS) vulnerability.

CNA Affected

[
  {
    "product": "SAP BusinessObjects Business Intelligence Platform (Info View)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 4.1"
      },
      {
        "status": "affected",
        "version": "< 4.2"
      },
      {
        "status": "affected",
        "version": "< 4.3"
      }
    ]
  }
]

0.001 Low

EPSS

Percentile

36.3%

Related for CVELIST:CVE-2019-0332