SAP BusinessObjects Business Intelligence BILogon/appService.jsp Code Execution

The vulnerability of the BILogon/appService.jsp module of the SAP BusinessObjects Business Intelligence platform exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2019-0303: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

PT-2019-4582

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform versions 4.2, 4.3 Description The issue exists due to the lack of neutralization of special elements in the BILogon/appService.jsp module. This could allow a remote attacker to execute arbitra...