CVE-2019-0395
SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.
Date published : 2019-12-11
https://launchpad.support.sap.com/#/notes/2830578
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397