CVE-2023-23856

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8253...

CVE-2023-23856

In SAP BusinessObjects Business Intelligence Web Intelligence user interface - version 430, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On...

CVE-2023-23856

SAP BusinessObjects Business Intelligence Platform (Web Intelligence UI) version 430 is affected by a cross-site scripting (XSS) vulnerability due to some API responses returning JSON with an incorrect Content-Type header. This specific issue enables a custom application that directly calls the W...