CVE-2018-2431

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Date published : 2018-07-10

http://www.securityfocus.com/bid/104695

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000