Unrated severityNVD Advisory· Published Oct 10, 2023· Updated Sep 18, 2024

Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence

CVE-2023-42474

Description

SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.

Affected products

SAP/BusinessObjects Business Intelligencellm-fuzzy
Range: = 420
SAP/Sap Businessobjects Business Intelligence (bi Workspace)cpe-rescue
Range: 420

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

me.sap.com/notes/3372991mitre
www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000