Hardcoded credentials

2022-02-0923:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.

CPENameOperatorVersion
businessobjects_web_intelligenceeq420

CPE	Name	Operator	Version
	businessobjects_web_intelligence	eq	420

References

launchpad.support.sap.com/

www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html