CVE-2019-0395

published 2019-12-11

CVE-2019-0395: SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects_business_intelligence_platform	< 4.2	4.2
sap_se	sap_businessobjects_business_intelligence_platform	—	—

CWE-79