Unscored CVE-2018-2431 EUVD-2018-14286GHSA-4r6w-8469-h8vg

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in …

Published Jul 10, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP BusinessObjects Business Intelligence Suite

Description

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
SAP	SAP BusinessObjects Business Intelligence Suite	= 4.10, = 4.20	—

References

104695 vdb-entry
https://launchpad.support.sap.com/#/notes/2624762
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000