NuytsTech Security

CVE-2021-33696

by ·

SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions – 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site.

Date published : 2021-09-15

https://launchpad.support.sap.com/#/notes/3062085

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806

Tags: