CVE-2022-35224

SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. This attack can be used to non-permanently deface or modify portal content. The execution of script content by a...

CVE-2021-33696: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Crystal Report, versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site...

PT-2021-20273

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Crystal Report versions 420, 430 Description: The issue arises from insufficient encoding of user-controlled inputs, allowing an authorized attacker to exploit a XSS vulnerability. This can...