CVE-2019-0382

MEDIUM 5.4CVE-2019-0382 · Published 13/11/2019 · updated 17/06/2026

In short

CVE-2019-0382 is a MEDIUM (CVSS 5.4) vulnerability affecting businessobjects business intelligence platform (sap).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 44.6% of all vulnerabilities.
Fix: update to 4.2 or later.

Package	Affected versions	Patched versions
businessobjects business intelligence platform sap	`< 4.2`	`4.2`

Description

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

More vulnerabilities in businessobjects business intelligence platform

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

businessobjects business intelligence platform

sap

< 4.2

4.2

More vulnerabilities in businessobjects business intelligence platform

See all →