CVE-2019-0374

published 2019-10-08

CVE-2019-0374: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected Cross-Site Scripting

Affected

5 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects_business_intelligence_platform	—	—
sap	businessobjects_business_intelligence_platform	—	—
sap	businessobjects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	< 4.2	4.2
sap_se	sap_businessobjects_business_intelligence_platform	< 4.3	4.3

CWE-79