CVE-2019-0395

MEDIO 5.4CVE-2019-0395 · Published 11/12/2019 · updated 17/06/2026

En resumen

CVE-2019-0395 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a businessobjects business intelligence platform (sap).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.73%, mayor que el 54.4% de las vulnerabilidades.
Solución: actualizar a 4.2 o posterior.

Package	Affected versions	Patched versions
businessobjects business intelligence platform sap	`< 4.2`	`4.2`

Description

SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Más vulnerabilidades de businessobjects business intelligence platform

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

businessobjects business intelligence platform

sap

< 4.2

4.2

Más vulnerabilidades de businessobjects business intelligence platform

Ver todo →