CVE-2023-42478
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 dic 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
Productos afectados
SAP_SE · Business Objects BI Platform¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →