Description
SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP BusinessObjects Web Intelligence | 420 | — |
Advisories 1
- WID-SEC-2023-2600 SAP Patchday Oktober 2023 BSI CERT-Bund (WID) · Oct 9, 2023