CVE-2025-31326CWE-80

HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)

Medium · published July 8, 2025

CVSS v3.1
4.1
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2025-07-08T00:34Z
EPSS history
Timeline
  • 08 JUL 00:34Z
    HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
    cvelistv5