Beveiligingsadvies

CVE-2019-0303

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-06-14 18:50:18

Laatst bijgewerkt 2024-08-04 17:44:16

Toegewezen door sap

CVSS-score geen score

Status PUBLISHED

Beschrijving

SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript code when the url is accessed.

← Alle CVE's bekijken Bekijk op cve.org ↗