CVE-2019-0332: SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and…

PriorityP424medium6.1CVSS 3.0

AVNACLPRNUIRSCCLILAN

EPSS

0.81%

52.5th percentile

SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and it will be executed while search performs its action, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects_business_intelligence	—	—
sap	businessobjects_business_intelligence	—	—
sap	businessobjects_business_intelligence	—	—
sap_se	sap_businessobjects_business_intelligence_platform	< 4.1	4.1
sap_se	sap_businessobjects_business_intelligence_platform	< 4.2	4.2
sap_se	sap_businessobjects_business_intelligence_platform	< 4.3	4.3

CVSS provenance

nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.