CVE-2018-2432

CVE-2018-2432: fallo en SAP BusinessObjects Business Intelligence (BI…

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP BusinessObjects Business Intelligence

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 1.0%
SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advanced attacks, including: cross-site scripting and page hijacking.
Productos afectados
SAP · SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console)