CVE-2019-0396

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML…

published November 13, 2019

CVSS
—
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00897 · 59.2th percentile
Published
2019-11-13T22:18Z
EPSS history
Timeline
  • 13 NOV 22:18Z
    SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML…
    cvelistv5