SAP BusinessObjects Business Intelligence Platform XSS (3266006)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P12, 4.3 SP2 P9 or 4.3 SP3. It is, therefore, affected by a vulnerability. Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business...

PT-2023-15950 · Sap · Sap Businessobjects Business Intelligence Platform Cmc Application

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform CMC application versions 420, and 430 Description: The issue arises from improper input sanitization of user-controlled input in the SAP BusinessObjects Business Intelligence Platform CMC...

CVE-2023-0018: Improper Neutralization of Input During Web Page Generation

Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious payload. Once these reports are viewable...