4 matches found
SAP Business Objects XI R2 Infoview Multiple XSS
Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52361/info SAP Business Objects is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...
SAP Business Objects XI R2 Cross Site Scripting
Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
CVE-2008-1894
CVE-2008-1894 affects BusinessObjects InfoView XI R2 (SP1, SP2, SP3) Java version before FixPack 3.5. The vulnerability is an XSS in desktoplaunch/InfoView/logon/logon.object via the cms parameter, allowing remote attackers to inject arbitrary web script/HTML. Evidence from CVE records and NVD co...