Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_(web_intelligence_ui):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Businessobjects Business Intelligence (Web Intelligence Ui) (039015d7-054a-511b-9744-96a93375589e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-23856 vulnerable 2026-06-08 05:56:04.565993 Details available
MEDIUM (4.3)
In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause a low impact on integrity of the application.
Published: 2023-02-14T03:15:05.875Z
Updated: 2025-03-20T17:55:57.774Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.