Unscored CVE-2022-22546 EUVD-2022-27692GHSA-qp9c-ch5v-22fj

Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web In…

Published Feb 9, 2022 · Updated Aug 3, 2024 · Assigned by sap

Vendor: SAP Product: SAP Business Objects Web Intelligence (BI Launchpad)

Description

Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.

Affected products

Vendor	Product	Affected	Fixed
SAP SE	SAP Business Objects Web Intelligence (BI Launchpad)	420	—

References

https://launchpad.support.sap.com/#/notes/3126748
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html