CVE-2023-0018

Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious payload. Once these reports are viewable...

CVE-2021-42061

This CVE concerns SAP BusinessObjects BI Platform (Web Intelligence) version 420, where insufficient encoding of user-controlled inputs leads to a Cross-Site Scripting (XSS) vulnerability. According to sources, a low-privileged attacker can retrieve some data from the victim without altering docu...