Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3v4q-xc3v-gwvx

Опубликовано: 08 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.1

Описание

SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected.

SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected.

EPSS

Процентиль: 6%
0.00025
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-80

Связанные уязвимости

CVSS3: 4.1
nvd
7 месяцев назад

SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected.

CVSS3: 4.1
fstec
7 месяцев назад

Уязвимость платформы бизнес-аналитики SAP Business Objects Business Intelligence Platform, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 6%
0.00025
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-80