In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
| Software | From | Fixed in |
|---|---|---|
| sap / businessobjects_business_intelligence_platform | 4.00 | 4.00.x |
| sap / businessobjects_business_intelligence_platform | 4.10 | 4.10.x |
| sap / businessobjects_business_intelligence_platform | 4.20 | 4.20.x |
| sap / businessobjects_business_intelligence_platform | 4.30 | 4.30.x |