Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-28165

Опубликовано: 14 мая 2024
Источник: nvd
CVSS3: 8.1
CVSS3: 9.3
EPSS Низкий

Описание

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:-:*:*:*
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:440:*:*:*:-:*:*:*

EPSS

Процентиль: 65%
0.00485
Низкий

8.1 High

CVSS3

9.3 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.1
github
больше 1 года назад

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application

EPSS

Процентиль: 65%
0.00485
Низкий

8.1 High

CVSS3

9.3 Critical

CVSS3

Дефекты

CWE-79