CVE-2018-2397

Publication date

2018-03-14 19:00:00

Family

sap

State

PUBLISHED

Description

In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.