SAP Knowledge Base Article - Preview

3413598 - Cross-Site Scripting Vulnerability in SAP BusinessObjects Business Intelligence Platform 4.2 (BI Launchpad)

Symptom

  • Cross-site Scripting (XSS) vulnerability: When using the BO help option, you could also enter code in the search box.
  • This vulnerability is seen only when the product is installed with the locale Spanish.


Read more...

Environment

  • SAP BusinessObjects Business Intelligence Platform 4.2
  • Windows/Linux
  • Tomcat

Product

SAP BusinessObjects Business Intelligence platform 4.2

Keywords

XSS, Spanish, Cross-site scripting, classic, BI launchpad , KBA , BI-BIP-INV , InfoView, BI launch pad , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.