Description
Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP BusinessObjects Business Intelligence Platform | 420, 430 | — |
Advisories 2
- WID-SEC-2023-1437 SAP Patchday Juni 2023 BSI CERT-Bund (WID) · Jun 12, 2023
- WID-SEC-2023-1168 SAP Patchday Mai 2023 BSI CERT-Bund (WID) · May 9, 2023