Описание
When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.
Ссылки
- Permissions RequiredVendor Advisory
- Vendor Advisory
- Permissions RequiredVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
5.4 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
Связанные уязвимости
When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.
Уязвимость модуля BI Workspace платформы бизнес-аналитики SAP BusinessObjects Business Intelligence, позволяющая нарушителю повысить уровень привилегий путем перехвата сеанса или раскрыть защищаемую информацию
EPSS
5.4 Medium
CVSS3
4.9 Medium
CVSS2