Medium · 6.1 CVE-2020-6216 EUVD-2020-27366GHSA-q3m3-f44j-425x

SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resul…

Published Apr 14, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP Business Objects Business Intelligence Platform (BI Launchpad)

Description

SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
SAP SE	SAP Business Objects Business Intelligence Platform (BI Launchpad)	< 4.2	—

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
https://launchpad.support.sap.com/#/notes/2876059