SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user�s browser, potentially exposing restricted information. This results in a low impact on confidentiality with no impact on integrity and availability.
| Vendor | Product | Versions |
|---|---|---|
| sap | sap businessobjects business intelligence platform | ENTERPRISE 430, 2025, 2027 |
Updated description with new details about the vulnerability and marked it as actively exploited.
Initial creation
