CVE-2018-2432

State: Published
Severity: Not scored
Published: Jul 10, 2018
Updated: Aug 5, 2024
Reserved: Dec 15, 2017

Description

SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advanced attacks, including: cross-site scripting and page hijacking.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console)SAP	= 4.10Affected = 4.20Affected = 4.30Affected

References

104716vdb-entry
https://launchpad.support.sap.com/#/notes/2523290
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.