CVEvulnerability
CVE-2014-8308
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• sap businessobjects 4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/128602/SAP-BusinessObjects-Persistent-Cross-Site-Scripting.html packetstormsecurity.com
- http://scn.sap.com/docs/DOC-8218 Vendor Advisory
- http://seclists.org/fulldisclosure/2014/Oct/41 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-032 www.onapsis.com
- http://www.securityfocus.com/archive/1/533649/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/70290 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96873 exchange.xforce.ibmcloud.com
- https://service.sap.com/sap/support/notes/1941562 Vendor Advisory
- http://packetstormsecurity.com/files/128602/SAP-BusinessObjects-Persistent-Cross-Site-Scripting.html packetstormsecurity.com
- http://scn.sap.com/docs/DOC-8218 Vendor Advisory
- http://seclists.org/fulldisclosure/2014/Oct/41 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-032 www.onapsis.com
- http://www.securityfocus.com/archive/1/533649/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/70290 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96873 exchange.xforce.ibmcloud.com
- https://service.sap.com/sap/support/notes/1941562 Vendor Advisory