Unscored CVE-2018-2479 EUVD-2018-14334GHSA-pr64-j6cq-j9jh

SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs…

Published Nov 13, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP BusinessObjects Business Intelligence Platform (BIWorkspace)

Description

SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
SAP	SAP BusinessObjects Business Intelligence Platform (BIWorkspace)	= 4.1, = 4.2	—

References

105902 vdb-entry
https://launchpad.support.sap.com/#/notes/2676094
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832