Sap Businessobjects Business Intelligence Platform (Bi Workspace)

SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scripting attack by an unauthenticated attacker due to improper sanitization of the user inputs on the network. On successful exploitation, an attacker can access certain reports causing a limited impact on confidentiality of the application data.

Published: 2022-04-12T16:11:28.000Z
Updated: 2024-08-03T05:48:37.559Z

The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject a malicious script while creating a new module document, file, or folder. When another user visits that page, the stored malicious script will execute in their session, hence allowing the attacker to compromise their confidentiality and integrity.

Published: 2021-09-14T11:19:15.000Z
Updated: 2024-08-03T23:58:22.807Z

When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.

Published: 2019-08-14T13:48:51.000Z
Updated: 2024-08-04T17:44:16.482Z

Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure.

Published: 2019-08-14T13:43:15.000Z
Updated: 2024-08-04T17:44:16.543Z

SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Published: 2019-03-12T22:00:00.000Z
Updated: 2024-08-04T17:44:16.455Z