High severity8.1NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2024-28165

Description

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Businessobjects Business Intelligence Platform2 versions
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:-:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:440:*:*:*:-:*:*:*
SAP/SAP Business Objects Business Intelligence Platform CMCllm-fuzzy
SAP/BusinessObjects Business Intelligence Platform (Web Intelligence)cpe-rescue
Range: 430

Patches

Vulnerability mechanics

References

support.sap.com/en/my-support/knowledge-base/security-notes-news.htmlnvdPatch
me.sap.com/notes/3431794nvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000