CVE-2018-2397

Description

In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.

References

https://launchpad.support.sap.com/#/notes/2550538

https://blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/

http://www.securityfocus.com/bid/103373

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS