CVE-2026-27683

CVE-2026-27683 affects SAP BusinessObjects BI: an authenticated attacker can inject malicious JavaScript via crafted URLs, causing script execution in the victim’s browser. Impact is limited to confidentiality (LOW) with no impact on integrity or availability. The vulnerability arises from URL-ba...