SAP Business Warehouse XSS Vulnerability in Business Explorer Web

A cross-site scripting (XSS) vulnerability has been identified in SAP Business Warehouse (Business Explorer Web). This issue allows an attacker to create a malicious link that, when clicked by an authenticated user, executes an injected script in the context of the user's browser. This vulnerability could potentially affect the confidentiality and integrity of user data.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the execution of malicious scripts in the context of the user's browser.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP Security Patch Day, which occurs on the second Tuesday of each month. For more information, consult the SAP Security Notes FAQ.