CVE-2022-22546

Summary

Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.

Affected Software

VendorProductVersion RangeStatus
SAP SESAP Business Objects Web Intelligence (BI Launchpad)420affected

Weaknesses

  • CWE-79: CWE-79

ADP Enrichment

CVE Program Container

Additional References

References