Security Advisory

CVE-2026-27683

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-14 00:08:15
Last updated 2026-04-14 13:14:17
Assigner sap
State PUBLISHED

Description

SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user�s browser, potentially exposing restricted information. This results in a low impact on confidentiality with no impact on integrity and availability.