EUVD-2019-1035

Malware in sbrugna...

The vulnerability of the SAP WebIntelligence BILaunchPad data analysis application, related to the lack of measures for cleaning input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the SAP WebIntelligence BILaunchPad data analysis application is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

Cross site scripting

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...