EUVD-2019-1035

Malware in sbrugna...

SAP WebIntelligence BILaunchPad XSS

The vulnerability of the SAP WebIntelligence BILaunchPad data analysis application is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

CVE-2019-0262

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0262

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...

Cross site scripting

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0262

CVE-2019-0262 affects SAP WebIntelligence BILaunchPad (versions 4.10 and 4.20). The vulnerability is a Cross-Site Scripting (XSS) flaw caused by insufficient encoding of user-controlled inputs in generated HTML reports, enabling script execution in a victim’s browser. The available connected docu...

CVE-2019-0262

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...

PT-2019-5601

Name of the Vulnerable Software and Affected Versions SAP WebIntelligence BILaunchPad versions 4.10, 4.20 Description The issue is related to insufficient encoding of user-controlled inputs in generated HTML reports, resulting in a Cross-Site Scripting XSS issue. This can be exploited by a remote...

CVE-2019-0262: Improper Neutralization of Input During Web Page Generation

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...