SAP BusinessObjects Business Intelligence Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in SAP BusinessObjects Business Intelligence applications. This issue allows authenticated attackers to inject malicious JavaScript payloads via crafted URLs. When the victim accesses the URL, the injected script executes in their browser, potentially exposing restricted information. The vulnerability affects several different versions and/or ranges.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the injection of malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.