Skip to content
OpenAdvisories
High · 8.1 CVE-2024-28165 EUVD-2024-25297GHSA-r32p-mj73-6wq6

Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

Published May 14, 2024 · Updated Dec 16, 2025 · Assigned by sap

Description

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application

Affected products

VendorProductAffectedFixed
SAP_SE SAP BusinessObjects Business Intelligence Platform 430, 440 —

Advisories 2

References