CVE-2023-42474: SAP Businessobjects Web Intelligence

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.

Affected products

• SAP Businessobjects Web Intelligence: version 420 only

Published 2023-10-10. Last modified 2026-06-17.