SAP WebIntelligence BILaunchPad XSS

The vulnerability of the SAP WebIntelligence BILaunchPad data analysis application is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

PT-2019-5601

Name of the Vulnerable Software and Affected Versions SAP WebIntelligence BILaunchPad versions 4.10, 4.20 Description The issue is related to insufficient encoding of user-controlled inputs in generated HTML reports, resulting in a Cross-Site Scripting XSS issue. This can be exploited by a remote...

CVE-2019-0262: Improper Neutralization of Input During Web Page Generation

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...