The vulnerability of the BILogon/appService.jsp module of the SAP BusinessObjects Business Intelligence platform allows a hacker to execute arbitrary code.

The vulnerability of the BILogon/appService.jsp module of the SAP BusinessObjects Business Intelligence platform exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2019-0303: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...