SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CPE | Name | Operator | Version |
---|---|---|---|
businessobjects_bi_platform | eq | 4.2 | |
businessobjects_bi_platform | eq | 4.1 |