CNNVD-202602-1690 Information

CNNVD ID

CNNVD-202602-1690

CVE-2026-24325

  • CNNVD Published: 2026-02-10

Description (Chinese)

SAP BusinessObjects Enterprise是德国思爱普(SAP)公司的一个商业智能平台。 SAP BusinessObjects Enterprise存在跨站脚本漏洞,该漏洞源于用户控制输入编码不足,可能导致存储型跨站脚本攻击。

Description (English)

SAP BusinessObjects Enterprise is a business intelligence platform of SAP Germany. SAP BusinessObjects Enterprise has a cross-site script loophole, which results from inadequate user-controlled input codes and may result in a storage-type cross-site script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

思爱普

Published

2026-02-10

Last Modified

2026-02-24

References

https://me.sap.com/notes/3697256 https://url.sap/sapsecuritypatchday https://access.redhat.com/security/cve/cve-2026-24325

Patch

https://me.sap.com/notes/3697256

Share on: