CVE-2010-3981

SAP BusinessObjects Enterprise XI 3.2 is affected by CVE-2010-3981 through an XSS flaw exposed in the Edit Service Parameters page via the ServiceClass parameter. Connected documents corroborate that Apache Axis2 (as included in relevant deployments) received a security release (Axis2 1.7.3) that...

CVE-2010-3981: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page...

PT-2010-5213

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Enterprise XI version 3.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the "Ed...