cbcvebase.
CVE-2023-42478
published 2023-12-12

CVE-2023-42478: SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when…

high7.6CVSS 3.1
AVNACLPRLUIRSCCLIHAN
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application.

Affected

4 ranges
VendorProductVersion rangeFixed in
sapbusiness_objects_business_intelligence_platform
sapbusiness_objects_business_intelligence_platform
sap_sebusiness_objects_bi_platform
sap_sebusiness_objects_bi_platform