CVE-2018-2432

SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated…

published July 10, 2018

CVSS
—
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advanced attacks, including: cross-site scripting and page hijacking.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00951 · 60.7th percentile
Published
2018-07-10T18:00Z
EPSS history
Timeline
  • 10 JUL 18:00Z
    SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated…
    cvelistv5