PT-2019-4587

CVE-2019-0326

·

Publicado

2019-07-09

·

Atualizado

2019-07-17

Descrição por

CVSS 2.0
6.4
Média
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise) versions 4.1, 4.2, 4.3
Description The issue exists due to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting (XSS) issue. This could allow a remote attacker to perform cross-site scripting attacks.
Recommendations For versions 4.1, 4.2, 4.3, update the software to a version that sufficiently encodes user-controlled inputs to prevent Cross-Site Scripting (XSS) attacks.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾