Medium severity5.4NVD Advisory· Published Mar 14, 2018· Updated Jun 17, 2026
CVE-2018-2397
CVE-2018-2397
Description
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- Range: 4.00, 4.10, 4.20, 4.30
- SAP SE/SAP Business Objects Business Intelligence Platformv5Range: 4.00
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.00:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.00:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.10:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.20:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.30:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/103373nvdThird Party AdvisoryVDB Entry
- blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/nvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.