PT-2019-4587
CVE-2019-0326
·
Publicado
2019-07-09
·
Atualizado
2019-07-17
Descrição por
CVSS 2.0
6.4
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise) versions 4.1, 4.2, 4.3
Description
The issue exists due to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting (XSS) issue. This could allow a remote attacker to perform cross-site scripting attacks.
Recommendations
For versions 4.1, 4.2, 4.3, update the software to a version that sufficiently encodes user-controlled inputs to prevent Cross-Site Scripting (XSS) attacks.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾