Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-6222 EUVD-2020-27372GHSA-ww7q-836v-jvv4

SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4.1, 4.2, does not sufficiently encode user…

Published Apr 14, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)

Description

SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) < 4.1, < 4.2 —

References