PT-2019-4587
CVE-2019-0326
·
تاريخ النشر
2019-07-09
·
تاريخ التحديث
2019-07-17
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise) versions 4.1, 4.2, 4.3
Description
The issue exists due to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting (XSS) issue. This could allow a remote attacker to perform cross-site scripting attacks.
Recommendations
For versions 4.1, 4.2, 4.3, update the software to a version that sufficiently encodes user-controlled inputs to prevent Cross-Site Scripting (XSS) attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾