CVE-2021-33696

Publication date

2021-09-15 18:01:42

Family

sap

State

PUBLISHED

Description

SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site.