CVE-2024-28165

CRITICAL 9.3CVE-2024-28165 · Published 14/05/2024 · updated 17/06/2026

In short

CVE-2024-28165 is a CRITICAL (CVSS 9.3) vulnerability affecting businessobjects business intelligence platform (sap).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
businessobjects business intelligence platform sap	`= 430= 440`	No fix yet

Description

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application

References

me.sap.com/notes/3431794 · Permissions Required
support.sap.com/en/my-support/knowledge-base/security-notes-news.html · Patch

More vulnerabilities in businessobjects business intelligence platform

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

businessobjects business intelligence platform

sap

= 430= 440

No fix yet

More vulnerabilities in businessobjects business intelligence platform

See all →