VYPR

Businessobjects Enterprise

by SAP

CVEs (1)

  • CVE-2026-24325MedFeb 10, 2026
    risk 0.31cvss 4.8epss 0.00

    SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an admin user to inject malicious JavaScript into a website and the injected script gets executed when the user visits the…