cbcvebase.
CVE-2018-2479
published 2018-11-13

CVE-2018-2479: SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in…

medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected

4 ranges
VendorProductVersion rangeFixed in
sapbusinessobjects_bi_platform
sapbusinessobjects_bi_platform
sapsap_businessobjects_business_intelligence_platform
sapsap_businessobjects_business_intelligence_platform