CVE-2014-8308: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-8457

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI EDGE version 4.0 Description A cross-site scripting XSS issue exists in the Send to Inbox functionality, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For SAP...